@ The security of an Internet-based absentee voting system comes under fire. PAGE 5 
® On the Mark: Maybe you should fight spam by ID’ing the few good e-mails. PAGE 8 
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Internal Resistance Can Users Weigh Linux Risk 


LinuxWorld attendees 


Doom Offshore Projects 


Disgruntled insiders may block outsourcing; | 
care needed when choosing project leaders 


BY PATRICK THIBODEAU 

NEW YORK 

The most serious threat to 
companies’ efforts to send 
work offshore isn’t coming 
from angry protesters and 


politicians. It’s coming from 


managers who are intent on 


torpedoing their companies’ 


offshore projects, execu- 


tives in charge of such proj- | 


ects said last week. 
Disgruntled managers, 


worried about shifts in re- 
sponsibilities or the loss of 
their jobs or the jobs of co- 
workers, can easily thwart 
offshore projects, the execu- 
tives said. 

Opposition can take many 
forms. Individuals 
may block meet- 
ings with vendors 
and consultants, 
raise numerous 
points of opposi- 
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SHELFWARE - software licenses sitting 

unused - can accumulate for a variety of reasons, 
including poor asset management, canceled or 
scaled-back projects, corporate downsizing and 
bad purchasing decisions. We've identified four 
strategies for clearing the shelves. PAGE 35 


VbasdberteseelUMacslbestlinetsbistactaclaald baad 

SBXECIF THASERASSRERERERCAR-RT LOT#AB-252 

#0234939/CB/a% CW2004848 802 5689 
92k 

PROQUEST 

PO BOX 984 

ANN ARBOR MI 49196-9984 


23-6 


tion throughout the process 
in an effort to frustrate it, or 
even take more nefarious 
actions such as sabotaging 
code developed offshore, 


| the executives explained. 


Rick Pfeiffer, former head 
of Asia-Pacific IT and oper- 
ations at General Electric 
Co., one of the first U.S. 
companies to move work 


tim offshore, said that 
\ | 60% of offshore 


project failures can 
be attributed to 
“someone directly 
Offshoring, page 10 


vary on the need fora 
shield from lawsuits 
BY TODD R. WEISS 


IT professionals appear to be 
split on whether new legal in- 
demnification programs from 
major Linux vendors will fuel 
wider adoption of the open- 
source operating system. 

At the Linux World Confer- 
ence & Expo here last week, a 


sampling of users in business- 


es where IT is mission-criti- 
cal, such as insurance and 
health care administration, 
said the expanded indemnifi- 
cation programs make them 


more comfortable with Linux. 


But they said other factors re- 


main to be addressed inside 
their companies before they 
can decide how to proc eed. 

Other users said indemnifi- 
cation simply isn’t an issue for 
them or is at best far down on 
their lists of criteria for Linux 
idoption. 

The topic of indemnifying, 
or protecting, companies that 
use Linux from legal actions 
similar to the lawsuit filed ear- 
lier this year by The SCO 
Group Inc. against IBM arose 
frequently during last week's 
event. IBM in fact said that it 
Linux World, page 14 


Retailers See 
RFID Ahead 


Say it’s only a matter of 


| time before adoption 


BY CAROL SLIWA 
Retail executives are now say- 
ing “when,” not “if,” as they 
consider the use of radio fre- 
quency identification tags to 
track goods through their sup- 
ply chains and ultimately in 
their stores. 
rhat’s a marked change 
from a year ago, when many 
expressed guarded sentiments 
about RFID’s prospects and 
Retail RFID, page 51 


Barriers to RFID 


Too expensive 
Suppliers don’t use it 
Difficult to integrate 


Consumers’ 
privacy concerns 


Too complicated 


# Multiple responses allowed 
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Introducing the new Microsoft Office System. 


Now users can do more for themselves so you can focus 
on the important things. More than just the core suite 


you're familiar with, the new Microsoft® Office System is 


an integrated system of easy-to-use, expanded programs, 


servers, services, and solutions that help end users be 
more self-sufficient. With Microsoft Office Professional 
Edition 2003, Microsoft Windows® SharePoint™ Services, 
and Microsoft Office SharePoint Portal Server 2003, end 
users will have the ability to create and manage their 
own team work spaces. So not only will they be able 

to collaborate and share information easily and more 
securely, but you'll be free to do what you really need to 
do. To find out how the Microsoft Office System can 


work for you, go to microsoft.com/officelT 


Microsoft More than what it used to be, it’s now a 
Office System comprehensive, customizable system. 
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Your potential. Our passion.” 


The right management can put you in control of your infrastructure, 
not the other way around. 


Unicenter: 


r, go to ca.com/infrastructure. 


Computer Associates® 





A Railroad Finds Its Voice 


In the Management section: Burlington Northern 
Santa Fe has started to use an interactive voice re- 
sponse system to translate radio calls from train 
crews into data, providing railroad managers and 
customers with near-real-time information. Page 37 
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Blogs Bubble Into Business 

In the Technology section: Weblogs began : 
a medium for personal communications, 
but the technology is making its way into 
corporations as a tool for knowledge man- 
agement and collaboration. Page 23 
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Small company Segway 
thinks big on IT. The Human 
Transporter maker recently 
upgraded its Oracle applica- 
tions and installed a VoIP sys- 
tem to prepare for future busi- 
ness growth. 


Security experts are split on 
whether an Internet-based 
absentee voting system is se- 
cure enough for this year’s 
elections. 


Check Point Software intro- 

duces a security appliance de- 
signed to detect and block at- 
tacks that originate internally. 


ERP users see little to distin- 
guish their vendors, a survey 
by The Yankee Group finds. 


A bank group provides guide- 
lines for evaluating the securi- 
ty risks of outsourcing. 


Parametric Technology aims 
to simplify its product life- 
cycle management tools. 


IBM tries to lure Windows NT 
users to Linux by offering a 
training and discount program. 


Health care firms comply 
with HIPAA’s data privacy 
regulations with the help of 
blade computing technology. 


Cisco tailors versions of its 
Catalyst switch line for use 
with metro Ethernet networks. 


Q&A: Stratus Technologies 
CEO David Laurello explains 
why he decided to disclose his 
private company’s financial 
results. 


TECHNOLOGY 


28 Disposable IT Drives Cam- 
paigns. Running a successful 
2004 presidential campaign 
requires an IT infrastructure 
that can be assembled quickly 
— and then left behind. 


30 Q&A: Managing Data Centers 
Through XML. Tim Howes, 
CTO of Opsware, reports on 
the progress of Data Center 
Markup Language. 


Future Watch: Printer Magic. 
Researchers are working on 
printing technologies that 
could produce 3-D electronic 
parts for home appliances or 
even for the family car. 


32 Security Manager’s Journal: 
Stepping Up to Sarbanes- 
Oxley. Mathias Thurman sorts 
out his group’s responsibilities 
as his company works to com- 
ply with federal regulations. 


MANAGEMENT — 


35 Software Sweep. Here are 
four proven strategies for 
identifying and clearing out 
shelfware and leveraging the 
software you have. 


38 Closing the Deal. GE Real Es- 
tate has automated most of 
the front-end processes on its 
commercial real estate deals, 
which has led to shorter cycle 
times and higher volumes. 


40 Q&A: SIM Focuses on Advo- 
cacy. Nancy Markle, new 
president of the Society for 
Information Management, lays 
out her agenda for this year. 
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On the Mark: Mark Hall 
learns that we’ve almost run 
out of ways to detect spam. 
Now we need to find ways to 
identify legitimate e-mail. 


Maryfran Johnson worries 
that frank, open discussions 
about offshore outsourcing 
are ai risk because it has be- 
come such a politically sensi- 
tive subject. 


Pimm Fox points to Source- 
Forge.net as a good example 
of how outsourced projects 
can be managed. 


David Moschella thinks the 
dot-com bomb never explod- 
ed. In fact, some dot-coms 
have proved to be more inno- 
vative than traditional ven- 
dors in creating value for 

IT shops. 


Curt A. Monash says im- 
proved text-search technol- 
ogy offers multiple opportuni- 
ties to improve your business. 


Barbara Gomolski picks the 
five most important issues 
facing CIOs this year. 


? Frankly Speaking: Frank 


Hayes didn’t think it would be 
possible for the SCO-vs.-Lin- 
ux legal machinations to get 
any weirder. But they did. 


WWW.COMPUTERWORLD.COM 


Root Out a Password Menace 
SECURITY: Administrative passwords are 
powerful, yet their management is often 
overlooked, says Nir Gertner, CTO of Cyber 
Ark Software Inc. He offers a checklist for 
setting up a password-control policy. 


© QuickLink 44149 


Plan on Server Virtualization 
OPERATING SYSTEMS: Running multiple vir- 
tual operating systems on a single machine 
can help you cut costs, boost security and 
improve software development, according to 
Avanade’s Chris Burry and Craig Nelson. 


© QuickLink 44179 


Comparing Wireless LAN Options 
MOBILE/WIRELESS: Airespace’s Bob O’Hara 
makes the case for intelligent WLANs, argu- 
ing that they offer a lot of capability at low 
cost. @ QuickLink 44102 


Is InfiniBand’s Ice Age Ending? 


STORAGE: Recent announcements suggest 
that the suspended-animation phase for 
this I/O technology might be over. 

© QuickLink 44218 


Expanding RADIUS 

SECURITY: Paul Funk, president of Funk Soft- 
ware, traces the evolution of the RADIUS 
server and its growing role in wireless tech- 


nologies. @ QuickLink 43872 
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What’s a QuickLink? 
Throughout each issue of 
Computerworld, you’ 

see five-digit QuickLink codes 

pointing to related content on 
our Web site. Also, at the end of " 
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each story, a QuickLink to that ree 

story online facilitates sharing it @ QuickLink ai430 
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Former CA Finance 
Exec Pleads Guilty 
ternational Inc. finance executive 
who resigned in October pleaded 
guilty to obstruction of justice in 
connection with a federal investi- 
gation of CA’s accounting prac- 
tices. CA said Lloyd Silverstein, 
who was its senior vice president 
of finance, also lied to internal in- 


vestigators when asked about al- 
leged improper revenue recogni- 


tion. The Securities and Exchange | 
| ing a voice-over-IP system 

| aren’t your typical small-com- 
pany moves. But Segway LLC 

| isn’t a typical small company. 


ee 


Commission is considering civil 
charges against the company. 


AT&T Wireless Puts 
Itself Up for Sale 


AT&T Wireless Services inc. con- 
firmed that its board is consider- 
ing a possible sale, but officials at 
the Redmond, Wash.-based com- 
pany declined to set a timetable 
for striking a deal. AT&T Wireless 
also reported an $84 million 
fourth-quarter loss and said cus- 
tomer turnover increased partly 
as a result of a problematic CRM 
upgrade [QuickLink 42831]. 


Microsoft Reports 
19% Revenue Gain 


Microsoft Corp. said revenue in its 
second quarter rose 19% year 
over year to $10.15 billion, with 
strong PC demand leading to dou- 
bie-digit growth in sales of Office 
and Windows XP. The company 
had a $1.55 billion profit for the 
quarter, which ended Dec. 31. 

Microsoft also eased the terms 
under which it licenses Windows 
communications protocols to oth- 
er technology vendors. 


Savvis to Acquire 
C&W Hosting Unit 


Cable & Wireless PLC’s U.S. Web 
hosting unit has accepted a buy- 
out offer from Savvis Communi- 
cations Corp. in St. Louis. C&W 
last month agreed to sell its as- 
sets to Gores Technology Group 
LLC [QuickLink 43474], but other 
buyers had a chance to outbid 
Gores in U.S. Bankruptcy Court. 


| year to anew 
| version of Or- 
| acle Corp.’s 


| ed by Fremont, Calif.-based 
| Appshop Inc., which manages _ | 
| the Oracle applications from a_ | 


| Denver. Segway CIO Patrick 

| this month that when he 

| of 2000, he quickly decided 

| wisest path for a start-up that 
| had a minimal IT infrastruc- 

| ture and wanted to hold down 
| its technology costs. 

| n’t build a data center or a big, | 


| dedicated IT staff but instead 
| [should] use software under a 


| Co. before taking the Segway 


| BY THOMAS HOFFMAN 
| MAN( 


HESTER, N.H 


NSTALLING an outsourced 
set of enterprise-class fi- 
nance and manufacturing 
applications and deploy- 


Segway made news in 


| December 2001 when it 

| introduced the Human Trans- 
| porter, a self-balancing, two- 

| wheeled transportation device 
| that was the brainchild of 

| founder Dean Kamen. The 

| company’s IT infrastructure 


includes VoIP technology 


| that was put in 


place last sum- 


| mer and a fi- 
| nance system 
| that was up- 


graded late last 


E-Business 
Suite lli applications. 

The finance system is host- 
Sprint Corp. data center in 
Zilvitis said in an interview 
joined the company in the fall 


that outsourcing would be the 


“I suggested that we should- | 


hosted environment that we 
could grow with,” said Zilvitis, 
who was CIO at The Gillette 


Segway’s Human Transporter 
first made headlines in 2001. 





job on a part-time basis. 


| Transporter maker builds IT strategy 
around Oracle, VoIP and outsourcing 


Outsourcing “allows us to 


| upsize or downsize our IT in- 


frastructure as needed,” noted 
Scott Frock, Segway’s director 


| of finance. “For a small-to- 


medium-size company, there 
are a lot of advantages.” 
Outsourcing also lets com- 


| panies like Segway avoid up- 


front investments 
in servers, soft- 
ware and techni- 
cal support staffers, 
said Terry Jost, a Dal- 
las-based consultant at 
Cap Gemini Ernst & 
} Young LLP. 
| The Oracle applica- 
j tions were initially rolled 
! out in early 2001. Be- 


board, Segway had 
been using Intuit 
Inc.’s QuickBooks 
accounting soft- 
ware. He said that to 
support its expan- 
sion, the company 
had to upgrade to 


| an accounting package de- 
| signed for small and midsize 
| businesses or a larger system 





that it could grow into. 


Segway opted for the sec- 
ond choice to avoid the poten- 


| tial need for a “painful and ex- 
pensive” conversion later, 


Zilvitis said. 

After evaluating software 
from Oracle and SAP AG, the 
company chose an uncus- 
tomized version of the Oracle 


| suite that’s geared to discrete 
manufacturers. The system in- | 
| cludes manufacturing and or- 


der management modules in 
addition to the finance appli- 
cations, and workers at Seg- 

way’s headquarters here and 


| its manufacturing plant in 
| nearby Bedford, N.H., access 





the software via Windows 


| 2000 PCs. 


| Poised for Expansion 
| Segway began upgrading to 
fore Zilvitis came on | 


Oracle’s 11.5.9 release over the 
Thanksgiving weekend and 


| completed work on the core 
| applications late last month. 


The company is also adding 


| software that will let workers 
| at its customer service part- 


ner, Frazer, Pa.-based Deci- 


| sionOne, access product war- 


| ranty data and other informa- 
| tion via Web browsers. Zilvitis 
said that capability should be 


1 Segway’s ‘Tech Plans Look 
Down the Road to Growth 


A former Computer Associates In- 


i suggested 
that we 


_ shouldn’t build a 
| data center or a big, 
| dedicated IT staff. 


| PATRICK ZILVITIS, CIO, SEGWAY 


| added within six months. 


To more effectively support 


| network connections to App- 

| shop and its own manufactur- 
| ing plant, Segway replaced its 

| private branch exchange 

| switches with VoIP equipment 


for “considerably less than 


| $20,000,” Zilvitis said. 


He added that the transition 
has provided several benefits, 


including the ability to set up 


low-cost switchboard exten- 
sions for remote employees, 
extra voice and data band- 


| width for future growth, and 
| cheap yet reliable connections 


to Sprint’s data center. 

For instance, Segway’s In- 
ternet connection to Denver 
costs the company $1,000 to 


| $2,000 per month, according 


to Zilvitis. By contrast, the 


| monthly tab for a T-1 connec- 


tion would have been $10,000 
to $12,000, he said. @ 44266 


Company Makes Do With Part-time CIO - for Now 


When Patrick Zilvitis took early 
retirement from Boston-based 
Gillette in 1999 after a decade as 
its ClO, he iooked forward to ski- 
ing, hiking and spending more 
time with his family. Then in 
2000, Zilvitis got a call from a 
recruiter working on behalf of a 
Segway investor. 

It didn’t take long for Zilvitis to 
become enamored with the 
start-up. However, he told Seg- 
way executives that he would 
agree to run the company's IT 
operations only if he could be a 
part-time ClO who worked just a 


few days a week. The company 
agreed, and Zilvitis said the part- 
time gig has worked out well for 
both him and Segway. 

in addition to Zilvitis, the IT 
staff currently includes three 
people: an Oracle administrator 
and two people who manage 
LANs, WANs, voice networks 
and Segway’s PCs and servers. 
Zilvitis said he frequently checks 
e-mail when he's not at work, 
but the employees who report to 
him are “entrusted with more au- 
tonomy than usual.” 

Things will soon be changing, 


though. The company is grow- 
ing and is about to reach the 
point where it will need to have 
a full-time CIO, said Zilvitis, 
adding that he expects to find a 
replacement within the next six 
months. 

The temporary nature of Zilvi- 
tis’ job was part of the under- 
standing between him and Seg- 
way from Day 1, Zilvitis noted. 

“| told them that if the compa- 
ny took off, | would replace my- 


: self with someone who could 


manage IT full time,” he said. 
- Thomas Hoffman 
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Experts Split on Internet-based 


Absentee Voting System’s Security 


Four members of review panel claim 


hackers could easily influence elections | 


BY JAIKUMAR VIJAYAN 

A federally funded Internet- 
based voting system slated for 
use in this year’s primary and 
general elections has unre- 
solvable security vulnerabili- 
ties that leave it open to wide- 
spread vote tampering and 
privacy breaches. 

That opinion was expressed 
last week by four members of a 
10-person peer review group as- 
signed to identify potential 
flaws in the Secure Electronic 
Registration and Voting Experi- 
ment (SERVE). Backers of 
SERVE counter that the security 
concerns are being overblown. 

The system is being devel- 
oped as part of a government 
initiative to make it easier for 
U.S. armed forces personnel 
and overseas civilians to vote. 
But the four critical members 
of the peer review group said 
that the SERVE system has so 
many vulnerabilities that fur- 
ther development should be 
immediately abandoned. 


Potential Weaknesses 
The problems lie in the inher- 
ent insecurities associated 
with Internet and PC-based 
systems, said David Wagner, 
an associate professor at the 
University of California, Berk- 
eley, and one of the security 
experts assigned to review the 
prototype SERVE system. 
The potential threats in- 
clude viruses and worms, de- 
nial-of-service attacks and 
Web site spoofing, Wagner 
said. An attack using any of 
those methods on the main 
SERVE system or any of the 
PCs being used by voters 
could seriously compromise 
the results, Wagner said. 
“SERVE is susceptible to large- 
scale election fraud that could 
be launched from outside the 
reach of U.S. law and go com- 
pletely undetected,” he said. 
For instance, it would be rel- 
atively easy for malicious 


hackers to insert spoofed Web 
pages that appear to belong to 
the SERVE system but are ac- 
tually designed to alter votes 


| or prevent them from being 


cast. A voter using a PC in- 
fected with a virus or worm 


| could easily jeopardize the in- 


tegrity of the system, Wagner 
noted. And the particularly 


| dangerous part is that such 


hacks could be carried out 
without ever being detected. 
“] think that a dedicated and 
experienced hacker could sub- 
vert the election rather easily,” 


said Avi Rubin, a professor at 
Johns Hopkins University and 
one of the security experts 
that reviewed SERVE. “I don't 
think that Internet-based vot- 
ing such as SERVE can be 
made secure enough for use 
until we can develop comput- 
er systems that are not vulner- 
able to viruses and Trojan 
horses, and until we can de- 
velop an Internet that is resis- 
tant to denial-of-service at- 
tacks.” The full report is avail- 
able online [QuickLink a3970]. 
Meg McLaughlin, president 
of eDemocracy Services at Ac- 
centure Ltd., the prime con- 
tractor for the project, dis- 
missed the concerns. “Every- 


New Tools Shift Focus to 


Internal Network Security © 


Products designed 
to detect attacks 
from within emerge 


BY JAIKUMAR VIJAYAN 


Last year’s Slammer and Blast- 
er viruses, which spread via 
infected PCs, highlighted the 
need for IT managers to focus 
not only on perimeter defens- 


| es, but also on internal net- 


work vulnerabilities and com- 
pliance with security policies. 
Since those attacks, several 
vendors have introduced 
products to help IT workers 
deal with both issues. The lat- 
est is Check Point Software 
Technologies Ltd., which last 
week introduced a security 


| appliance called InterSpect 


that’s designed to detect and 


| block attacks originating from 


inside a company’s network. 

Redwood City, Calif.-based 
Check Point said InterSpect 
inspects interna! network traf- 
fic for virus signatures and 


| other patterns that suggest an 


| 
| 
| 
| 


| attack is taking place. The 


technology lets users identify 
and quarantine infected sys- 
tems to prevent any damage 


TECHNOLOGY DETAILS 


InterSpect 
ED alle CLIC Ee NOM LATeRSTO Ly.) 
ANOS RINSE LAS Oc 
corporate networks 


= Supports network segmenta 
Tolpm Cok sisi oRmelaitelaR-1trle 

deel eae lets 
and isolate suspicious systems 


from spreading, said Shankar 
Swamy, a Check Point product 
manager. It also allows IT ad- 
ministrators to segment net- 
works into separate security 
zones to further contain an 
attack. 

Such capabilities are crucial 
for protecting networks against 
internal compromise, said In- 
terSpect beta tester Greg Mur- 
ray, vice president of informa- 
tion security at Information 
Resources Inc., a Chicago firm 
that does market research for 
food, consumer goods and 
pharmaceutical companies. 

Some companies that were 


| otherwise well protected got 


hit by the Blaster virus when 
mobile workers reconnected 
infected notebook and laptop 


thing that was raised 
in this report, we 
have talked about in 
this project,” Mc- 
Laughlin said, add- 
ing that in each case 
steps have been tak- 
en to minimize the 
threat, including 
stringent user au- 
thentication and en- 
cryption of data. 
Each online voter 
will also be present- 
ed with a confirma- 
tion screen that will 
allow him to verify 
whether the ballot 
has been properly 
received by SERVE. 
Information about 
the vote is also kept separate 
from information about the 
voter, and at no time will any- 
one be able to link the two to- 
gether, McLaughlin added. 


PCs to corporate networks, 
Murray said. Products like In- 
terSpect can help users identi- 
fy infected systems faster and 
cut them off from the rest of 
the network, he added. 

“It automates the identifica- 
tion and containment of inter- 
nal threats,” said Murray, who 
has been testing InterSpect for 
several months. Information 
Resources, which stores more 
than 130TB of research data 


| on its network, is using the 
| Check Point technology to 
| carve out separate network 


zones for each of its five test- 
ing and quality assurance labs. 
Check Point's product joins 
a growing list of security tools 
with similar objectives. For 
example, Cisco Systems Inc. in 
November said it was teaming 
with Symantec Corp., Net- 
work Associates Inc. and 
Trend Micro Inc. to develop 
technologies to help compa- 
nies block or safely quarantine 
PCs, servers and other devices 
that don’t comply with corpo- 
rate policies. Sygate Technolo- 


| gies Inc., InfoExpress Inc. and 
Zone Labs Inc. also sell prod- 


ucts for enforcing security 
policies on systems used by 
remote workers. 
Boston-based MFS Invest- 
ment Management uses soft- 
ware developed by Found- 


| think that 
a dedicated 
and experienced 
hacker could sub- 
vert the election 
rather easily. 


Cee eeesesecesseeesess 


AVI RUBIN, professor, 
Johns Hopkins University 
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Thad Hall, pro- 
gram officer at The 
Century Founda- 
tion, a Washington- 
based public policy 
think tank, is one of 
the peer rev iew 
members who dis- 
agrees with the se- 
curity assessment 
of the four mem- 
bers who were crit- 
ical of the system 

“The risks associ- 
ated with an Inter- 
net-based voting 
system are no more 
or less than a pa- 
per-based sy stem,” 
he said. Hall added 
that the initial 
SERVE tests were deliberately 
small in scope and weren't be- 
ing viewed as an evaluation of 
a full-fledged voting system. 


@ 44255 


stone Inc. to continually scan 
and inventory the systems on 
its networks. The software 
helps MFS detect systems that 
are vulnerable to new security 
threats, assess the level of risk 
that the threats pose and pri- 
oritize responses, said Tom 
Clark, MFS’s vice president of 
corporate systems security 
“The knowledge and ability 
to allocate the right resources 
to the right vulnerabilities at 
the right time has been the 
fundamental ROI,” he said. 


© 44261 
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Corrections 


A story about Calpine Corp. CiO 
Dennis Fishback that ran in the 
Premier 100 IT Leaders 2004 
special section on Jan. 5 incor- 
rectly reported the total amount 
of IT costs that Calpine has cut 
from its budget since 2001. The 
San Jose-based company has re- 
duced costs by more than $44 
million, according to Fishback. 


In the Jan. 12 Management feature 
“The Forest vs. the Trees,” Com- 
puterworld should have noted that 
Paul A. Strassmann’s Information 
Productivity methodology includes 
factors such as profits, cost of 
capital and capital risk, in addition 
to total costs of information. 
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Whatever your world. 









Dell has a customized IT solution for your business, no matter what business you're in, or what size 
it is. From PowerEdge” servers featuring Intel® Xeon” processors to network support products like PowerVault” 
storage and PowerConnect” switches, Dell offers flexible, high-performance industry-standard technologies and 
are solutions that are just right for your particular business needs. And we'll help you every step along the 
/hether it's planning and design, testing and validation, systems management, or our award-winning 24x7 
service and support, Dell will help you create an IT infrastructure that's easy to choose, deploy and manage 


So make life easy on yourself and get a big advantage over your competition — with a unique IT solution from Dell 


PC Magazine Editors’ Choice Award 
PowerEdge 1750 


— October 28, 2003 


File&Print Servers Nir CRSA eRe 
starting at $399 managing your network easy 


NEW POWEREDGE™ 400SC SERVER POWEREDGE™ 650* RACK SERVER ES 


| Small Business Value Server = — Rack Server 
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starting at ASL) manage diverse networks 


POWEREDGE™ 2600 TOWER SERVER aaa a) 


Multi-Use Tower —— Feature-Rich 1U Rack Server 
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re ENS Network Storage Options Ne iid 
Build a powerful, protected network starting at $199 starting at AY :hs] f 
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speed arene Mission Critical Tower Server Optimized File Storage Across the LAN High-Performance Workgroup Switch 
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it Seen A + Pow E-VALUE Code: 20449-$20117g 
© 10 Hot-Plug PCI-X Slot $ 4 49 $12 
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starting at 


$ $107 ae www.dell.com/storage4mybiz 
E-VALUE Code: 20443-S20139g MC ct, 


Easy as Do@LL 


Click www.dell.com/bizsolutions Cal! 1-800-545-9674 
GO 
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IBM Says It Will 
Add 15,000 Jobs 


IBM, which has made a series of 
small layoffs since last Septem- 
ber, said it plans to add 15,000 
jobs worldwide this year - a 
move that would increase its 
workforce by 5%. About 4,500 
of the new jobs will be based in 
the U.S, an IBM spokeswoman 
said. The company also plans to 
spend $200 million to train up to 
100,000 workers in hot IT skills, 
such as Linux and Web services. 


Dell Warns About 
Defect in Server 


Dell Inc. warned that its Power- 
Edge 1650 server can overheat, 
emit smoke and shut down be- 
cause of a defective component. 
Dell said it will replace the moth- 
erboards on all 1650s sold be- 
tween last January and early 
May. The 1650, a rack-mounted 
server for use in data centers, 
was dropped in mid-2003 after 
Dell introduced a system called 
the 1750. 


Siebel Buys Maker 
Of Call Center Apps 


Siebel Systems Inc. has agreed 
to buy Ineto Services Inc., a de- 
veloper of hosted call center ap- 
plications, for up to $5 million in 
cash. This would be Siebel’s sec- 
ond acquisition of a hosted CRM 
software vendor in three months; 
the company bought UpShot 
Corp. in November. Siebel also 
reported a $41.5 million profit on 
revenue of $366.7 million for 
last year’s fourth quarter. 


Sun Nabs Content 
Switch Vendor 


Sun Microsystems Inc. said it 
will acquire Nauticus Networks 
Inc., a vendor of content switch- 
es designed for use with Web- 
based applications. Financial 
terms weren't disclosed. Sun 
said it plans to integrate Nauti- 
cus’ technology with its line of 
blade servers. 
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Spam-Detection ‘Tech 
Reaches Its Limits ... 


... So IT managers need to shift their spam-fighting strategies, claims 
Paul Judge, chief technology officer at CipherTrust Inc. in Alpharetta, 
Ga. “With spam no longer being a small percentage of messages and 
now being the majority of e-mail, we need to fight the problem the other 
way around,” he suggests. In short, identify the good messages and let 
them through, and chuck everything else. That’s part of the logic 


behind the company’s IronMail 4.0 appli- 
ance, which is being released today. Ci- 
pherTrust has boosted the power of its 
Enterprise Spam Profiler (ESP) tool in 
IronMail to more accurately distinguish 
good messages from bad ones. Geoff 
Catron, director of networks/security for 
the Georgia Department of Technical 
and Adult Education, manages the mes- 
saging on 34 campuses and a central of- 
fice, each of which uses an IronMail 3.0 
appliance. He’s looking 
forward to 4.0 because of 
the improvements in ESP. 
Catron says the central of- 
fice alone gets 12,000 mes- 
sages a day, and 92% are 
spam. Getting to that good 
8% takes some diligent 
tuning of the ESP, he says. 
At the central office, 
where one of Catron’s en- 
gineers regularly tunes the 
filtering parameters, that’s 
not a big deal. But separat- 
ing the wheat from the spam- 
my chaff is more problem- 
atic on the campuses, 
where staff have different 
skill levels and face differ- 


ERP Vendors ‘Earning Little Loyalty’ 


inc. in San, 
Francisco this week will re- 
lease Laszlo Presentation 
Naame Un Him Crud 
Optimizer. The upgrade is 
CEB Come el item Ceti: (a Ce 
based programs. It combines 
Eun ee eee UP G1 
to deliver interactive, high- 
eae Ulece ye ere ice 
OR CCRC Mtl le i clee. 1 
www.lazlosystems.com/ 
developers. Enterprises 
CCN eave ae) cs 
$22,500 per server CPU. 


ent day-to-day challenges. But with 4.0, 
Cipher'Trust will take over tuning the 
ESP to locate good mail and regularly 
download updates to user appliances 
with improved processing techniques. 


| IronMail 4.0 also adds Bayesian and URL 


filtering. Pricing starts at $27,000. ® Phil 
Raymond agrees with Judge that tradi- 
tional spam filters are imperfect. “We 
know the perfect filter is the pocketbook 
of the spammer,” says the CEO of Van- 
quish Inc. in Marlboro, 
Mass. Raymond antici- 
pates that Vanquish will 
later this year unveil a new 
antispam system that’s dri- 
ven by economics. He says 
the planned service and 
software offering, while 
complex, will let legiti- 
mate bulk e-mailers offer 


to reject unwanted mes- 
sages. The legit crowd, 
such as newsletter pub- 
lishers, will put up a bond 
for each mailing and bet 
that very few recipients 
will reject them. Howev- 
er, if you do get an un- 


users a financial incentive | 
| early March, APC will release its Biomet- 


www.computerworld.com 


| wanted message, you can reject it with a 
| button that’s attached to each e-mail and, 
| say, pocket a buck in a PayPal account. Un- 

| der this scheme, a tally is kept of every 


time you reject an e-mail (and pocket the 
money) so that other mailers can deter- 
mine your sensitivity to unsolicited mes- 
sages and drop you from their lists. Ray- 
mond hopes that over time, legitimate 
bulk mailers will embrace a system like 


| this so completely that any bulk e-mail 


from an unknown source will automati- 
cally be rejected by all mail systems. 


| ® When you're done fighting spam (yeah, 


right), you can return to securing your 


| data, which is most at risk from internal mal- 
| contents. That’s the logic behind Omni- 


Trust Security Systems Inc.’s Trusted En- 


| vironment. It lets you set policies dictat- 


ing who can see what documents when, 
based on where they are and what device 


| they’re using. Michael Mansouri, CEO of 


the Mountain View, Calif., company, 
which is changing its name from Probix 
Inc. tomorrow, says you can have policies 
for remote laptops and handhelds that 
are different from those for desktop PCs. 


| ® Are your users having trouble managing 
| their passwords? According to Greg 


Fournier, product line manager at Ameri- 


| can Power Conversion Corp. in West 


Kingston, R.L., the average employee has 


| about 17 of them. And help desk experts 
| say the No. 1 request from callers is for 
| assistance with forgotten passwords. Bio- 


metric devices can consolidate your 
passwords and add security to a PC. But 
they’re pretty pricey. Or have been. In 


ric Manager for under $50. It will remem- 
ber all of your passwords (except for the 


| one to its master file of encrypted pass- 


words) and apply them to the right appli- 


| cations. Right now, it’s Windows only, 
| but you second-class Macintosh citizens will 


get a version later in the year. @ 44233 


| tion even if they wanted to. 
| While some ERP vendors 
might have an edge in a specif- 


BY MARC L. SONGINI 
Vendors of ERP software are 
apparently making little prog- 
ress in differentiating their 
brands, according to a recent 
survey by The Yankee Group. 
Users who were asked to 
evaluate major ERP vendors 
such as Oracle Corp., SAP AG, 
IBM and PeopleSoft Inc. said 


| they find them to be more 


alike than different, said Jon 
Derome, an analyst at the 


| Boston-based research firm. 


That means repeat business is 


| key to success in the ERP mar- 


| installed base will be crucial to 
| vendor survival, he said. 


| funded the research itself, sur- 


| various ERP vendors and 
| found that respondents were 





ketplace, and upselling to one’s | 


The Yankee Group, which 


veyed 350 executives in com- 
panies that run software from 


most likely to implement or 
recommend Oracle software. 
Oracle won plaudits from 32% 
of those surveyed. PeopleSoft 
was touted by 29% of the re- 
spondents, and SAP was 





backed by 26%. J.D. Edwards & 


Co., Microsoft Great Plains 
and IBM were each cited by 
14%. IBM was cited strictly on 


| the strength of its name; IBM 
| is not an ERP vendor. 


Those numbers are all well 
below the 50% level that 
would be considered a healthy 


| rating, said Derome. 


One user offered his own 
critique. John Schindler, CIO 
at lighting fixtures maker The 
L.D. Kichler Co. in Cleveland, 
said companies generally have 
too much vested in their ERP 
systems to scrap an installa- 


| ic industry, their overall per- 


formance is about the same, 


| said Schindler, whose compa- 
| ny uses PeopleSoft software. 


And support is handled 
poorly by companies across 
the board, added Schindler, a 
former Oracle user. “It’s a li- 
cense to steal, and the dollar 
amounts are reaching levels 
that are not justified,” he said. 
“All the majors use some sort 
of percentage increase annual- 
ly, which builds over time to 
an annuity that is just out of 
line.” @ 44275 





WEIGHING THE COST OF LINUX VS. WINDOWS? 
LET'S REVIEW THE FACTS. 


Source: Microsoft 2003 (Audited by META Group 
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One Linux image running on One Windows Server 2003 image 
two 2900 mainframe CPUs running on two 900 MHz Intel Xeon CPUs 


Linux was found to be over 10 times more expensive than Windows Server™ 2003 in a recent study 
The study, audited by leading independent research analyst META Group, measured costs of 
Linux running on IBM's z900 mainframe for Windows-comparable functions of file serving and 
Web serving. The results showed that IBM z900 mainframe running Linux is much less capable 
and vastly more expensive than Windows Server 2003 as a platform for server consolidation 


To get the full study and other third-party findings, visit 
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Bank Group Offers Guidelines 


On fhatonmneien Security Risks 


Publishes 33-page spreadsheet to help 
gauge if vendors can protect IT systems 





BY LUCAS MEARIAN 
CONSORTIUM Of the 
country’s top finan- 
cial services firms 
last week published 

a set of industry guidelines to 

use in evaluating the security 

risks of IT outsourcing deals. 
The Banking Industry Tech- 
nology Secretariat (BITS) in 

Washington released the secu- 

rity guidelines as an adden- 

dum to an existing framework 
for managing business rela- 
tionships with IT services 


Retaining the 


Some work can’t be moved 
overseas, or even out of the 
company, because it's too spe- 
cialized. That was the case at 
TWI Interactive Inc., the Boston- 
based digital media arm of glob- 
al sports and entertainment 
marketing firm IMG. 

Last year, TWI set out to in- 
crease the efficiency of its IT op- 
erations and cut costs while re- 
taining ownership of its crown 
jewels: business knowledge 
about sports. 

In April TWI signed a deal with 
SevenSpace Inc., an Ashburn, 
Va.-based firm that specializes in 
managing only certain parts of a 
company's IT operations so the 
client can retain the processes it 
believes it can do better than any 
service provider. 

John Watson, vice president 
of business development and 
head of the IT division at TWI In- 
teractive, said he expects about 
$2 million in savings over three 
years as a result of reduced IT la- 
bor and systems spending. Sev- 
enSpace is doing the work in the 
U.S., something Watson wanted 
so he could maintain a close re- 
lationship with the service pro- 
vider. He said TWI eliminated 21 
IT jobs, but about half of those 





providers. The group’s goal is 
to help financial services 
firms streamline the outsourc- 
ing evaluation process and 
better manage the risks of 
handing over control of key 
corporate systems to vendors. 
The guidelines are based on 
the International Standards 
Organization’s ISO 17799 code 
of practice for information se- 
curity management, which 
covers categories such as doc- 
umenting corporate security 
policies and classifying assets. 


Crown Jewels 


workers moved to SevenSpace. 

Watson said TW is retaining 
all application and content de- 
velopment because the devel- 
opers must have expertise in 
sports. “That's the thing we un- 
derstand and know how to do,” 
he said. 

Many companies, however, 
do choose to outsource applica- 
tion development to service 
providers with specialized busi- 
ness knowledge, including some 
that are offshore. David Tapper, 
an analyst at research firm IDC 
in Framingham, Mass., said that 
if prospective outsourcers claim 
to have specialized business 
expertise, a company consider- 
ing its services should ask for 
customer references and speak 
to the outsourcer’s users for 
verification. 

While SevenSpace currently 
provides IT infrastructure ser- 
vices in the U.S., the company is 
exploring the use of offshore re- 
sources. CEO Peter Weber said 
that he considers offshore oper- 
ational management capabilities 
to be immature but that in the 
next six months, his firm will 
conduct live tests of offshore 
operations. 

~ Patrick Thibodeau 





They also include best prac- 
tices gathered from BITS 
members and input from ven- 
dors, government agencies 
and third-party IT auditors, 
said Faith Boettger, a senior 
consultant at BITS. 

Bob Cedergren, second vice 
president of information secu- 
rity and business continuity 
planning at Fortis Inc., a finan- 
cial services firm with U.S. op- 
erations in New York, said se- 
curity concerns related to out- 
sourcing are getting more at- 
tention in corporate board- 
rooms. “Each time there’s a 
virus outbreak, this gets dis- 
cussion within our CIO group 
here at Fortis as well as with 
the CEOs” of individual busi- 
ness units, Cedergren said. 

The BITS guidelines, which 
are built into a 33-page spread- 
sheet, provide a single set of 
rules for evaluating outsourc- 
ing and IT services vendors, 
Cedergren said. He noted that 
in the past, each of Fortis’ op- 
erating units had its own ven- 
dor evaluation procedures. 
“This puts it down on paper 


and creates a common set of 


expectations for us,” he said. 
Many of the financial ser- 
vices industry’s certification 
standards, including State- 
ment on Auditing Standards 
No. 70, SysTrust and Web- 
Trust, don’t fully cover what 








companies have been looking 
for in a best-practices matrix, 
according to Boettger. “Finan- 
cial institutions were deploy- 
ing their own internal re- 
sources or engaging third par- 
ties to perform due diligence 
and ongoing reviews to close 
that gap in the assessment re- 
quirement,” she said. 

With the added security 
guidelines, BITS’s framework 
now includes questions to ask 
IT services vendors during 
each stage of the outsourcing 
process, including risk man- 
agement, planning, testing and 
governance, Boettger said. 
The framework was originally 
published in 2001 and was up- 
dated by BITS last November. 

One key area that wasn’t 
covered in earlier guidelines 
was business continuity, 
which now falls under the um- 
brella of information security 
at Fortis because of terrorist 
attacks around the world and 
last August’s blackout in parts 
of the northeastern U.S. and 
Canada, Cedergren said. 

He added that Fortis’ IT de- 
partment takes time to under- 
stand the security procedures 
of service providers and then 
writes into any outsourcing 
contracts provisions that al- 
low audits and on-site reviews 


as needed. @ 44249 





Continued from page 1 


Offshoring 


tied to it |who] has seen to it 
that it falls off the rails.” 

Internal opposition is “one 
of the top reasons why proj- 
ects don’t go through,” echoed 
Cliff Justice, managing direc- 
tor at NeoIT.com Inc., a San 
Ramon, Calif.-based offshore 
consultancy. 

Advice for dealing with in- 
ternal resistance, offered at a 
Strategic Research Institute 
LP conference here last week, 
includes ensuring strong sup- 
port from upper management, 
picking the right people to 
head the effort and getting 
managers involved early in the 
process. 

“Choose the business unit 
manager who is going to be 

Continued on page Il 





PATRICK THIBODEAU 


NEW YORK PROTESTERS voice their disapproval about offshore outsourcing. 





www.computerworld.com 


Parametric Tries to Simplify Its 
Product Management Applications 


Windchill upgrade 
adds integrated 

collaboration, data 
control capabilities 


BY JAIKUMAR VIJAYAN 
Though software vendors tout 
the use of product life-cycle 
management tools as a way to 
improve manufacturing effi- 
ciencies, many companies are 
continuing to drag their feet 
when it comes to adopting 
PLM products. 

Some vendors have re- 
sponded by trying to make 
their software easier to use 
and integrate with other cor- 
porate applications. Paramet- 
ric Technology Corp.’s intro- 
duction last week of an up- 
grade of its Windchill PLM 
suite is a case in point. 

Waltham, Mass.-based PTC 
said the software was com- 
pletely redesigned as part of 
its Windchill 7.0 upgrade. New 
features include integrated 
end-user collaboration and data 
control capabilities, plus hooks 
for tying PLM data to applica- 





| tions such as ERP and supply 


chain management systems. 
Improved data visualization, 
support for J2EE and Web ser- 
vices technologies, and PDF- 
based document collaboration 
capabilities are also being 
added, according to PTC. The 
upgrade is aimed at “reducing 
complexity and risk” for users 
of the software, said Jim Hep- 
pelmann, an executive vice 
president at the company. 


Seeking Clarity 

Ping Inc., a Phoenix-based 
maker of sporting equipment 
that uses PTC’s software, is 
evaluating Windchill 7.0 for a 
possible upgrade later this 
year. Of particular interest is 
the integration of Windchill’s 
PDMLink product data man- 
agement tool and ProjectLink 
collaboration module, said 
Dan Shoenhair, an engineering 
director at Ping. 

Melding the two functions 
would make it easier and fast- 
er for Ping’s engineers, design- 
ers, purchasing agents and oth- 
er employees to share product 
data, Shoenhair said. Current- 


ly, Ping uses separate servers 
and databases to manage prod- 
uct data and support collabo- 
ration among end users. 

The integration in Wind- 
chill 7.0 “simplifies things and 
lends more clarity to what 
you're doing,” Shoenhair said. 
End users should also be able 
to modify product data and 
track changes made by other 
workers more easily than they 
can now, he added. 

PTC’s Enterprise Systems 
Integration module for tying 
PLM data to other applica- 
tions is another key new fea- 
ture in Windchill 7.0, said 
Gisela Wilson, an analyst at 


= Combines PTC’s ProjectLink 
and PDMLink technologies 
to provide integrated support 

Coe e eum tt.) 
management. 


# Includes an Enterprise Sys- 
Ca cr emer 
supports ties to other prod- 
TOs ML CSD Lage-Te)e] fret Co 


| Framingham, Mass.-based 
research firm IDC. 

PTC worked with Tibco 
Software Inc. to develop 
connectors between Wind- 
chill and SAP’s ERP applica- 
tions. Wilson said the links 
will support a bidirectional 
flow of data between the ap- 
plications, allowing for even 
wider collaboration on prod- 
uct development and other 
activities. 

For instance, engineering 
or product design changes 
could be more easily commu- 
nicated to supply chain and 
procurement systems, Shoen- 
hair said. But he noted that 
Ping has no immediate plans 
to use the SAP integration 
functionality. 

PTC will build a similar 


Oracle Corp.’s business appli- 
cations and then do the same 
with PeopleSoft Inc.’s soft- 
ware, Heppelmann said. But 
he didn’t disclose a develop- 
ment schedule. 

Improved integration is 
needed to boost the adoption 
of PLM software, said Bruce 
Hudson, an analyst at Meta 
Group Inc. “Integration is an 
ugly secret of PLM,” Hudson 
said. “It’s the one area where 
PLM vendors do the least due 
diligence.” @ 44262 








bridge between Windchill and | 





Continued from page 10 

most enthusiastic, and basically 
have a manager who won't sab- 
otage the process,” said Amrita 
Joshi, a vice president who has 
managed business process out- 
sourcing projects at IndyMac 
Bank in Pasadena, Calif. 

“If anyone ... wants to 
blackball the project, it’s going 
to be blackballed. So you have 
to build consensus,” said Paul 
Fielding, a vice president who 
heads outsourcing efforts at 
J.P. Morgan Chase & Co. in 
New York. 

No one is saying that getting 
internal support is easy. Off- 
shoring of white- and blue- 
collar jobs to low-wage coun- 
tries is an emotionally and po- 
litically charged topic. Oppo- 
nents, including laid-off IT 
workers, have succeeded in 
getting bills introduced in 
Congress that would set re- 


strictions on visas for foreign 
workers. 

Outside the hotel where the 
conference was held, a group 
of about 30 protesters braved 
the cold to hold “Buy Ameri- 
can” signs. Conference aiten- 
dees were advised to remove 
their name tags when leaving 
the building, but the protesters, 
including John Bauman, a long- 
time IT worker at a Connecti- 
cut utility who said he lost his 
job because of cutbacks unre- 
lated to offshoring, were peace- 
ful. Bauman, who has been out 
of work for 15 months, said he 
hasn’t found work because 
many employers in the state 
are moving jobs overseas. 

“Offshoring will probably 
never stop,” said Bauman, who 
serves as president of The Or- 
ganization for the Rights of 
American Workers Inc. in 
Meriden, Conn. “Whenever a 


! 





company can find a way to 
save money, they'll de it.” 

Bauman and other protest- 
ers said they’re hoping that 
political lobbying and eco- 
nomic pressure, such as refus- 
ing to give their business to 
companies that outsource off- 
shore, will become effective 
deterrents. 


Potential Consequences 
The political and social rami- 
fications of offshoring are in 
fact making some firms disin- 
clined to move work out of the 
country, some conference at- 
tendees said. Quantifying that 
is difficult, however. 

Pfeiffer, who is now CEO of 
Ambertek Group, a Darien, 
Conn.-based consulting com- 
pany, said offshoring is here to 
stay. “Despite the political 
rhetoric . . . this is going to 
continue to move forward,” he 


said, adding that managers 
have to come to grips with 
changing responsibilities. 
“You have to think of your job 
as a global job.” 

Offshore work doesn’t al- 
ways lead to reductions in a 
U.S. company’s workforce. 
That has been the experience 
of J.P. Morgan Chase, according 
to Fielding. He said the compa- 
ny has recently seen a net in- 
crease in IT jobs, but in areas 
such as architecture design 
and development, which re- 





quire higher levels of expertise | 


than the development work it 
sends offshore. “It’s a definite 
growth” in IT positions over- 
all, he said. @ 44256 


For additional coverage of outsourcing 
issues, visit our Web site: 
QuickLink a2290 
www.computerworld.com 





COMPUTERWORLD January 26, 2004 


IBM Entices 
Windows NT 
Users to Linux 


BY SCARLET PRUITT 

IBM is readying a program to 
push its enterprise software 
running on Linux as an alter- 
native to Microsoft Corp. soft- 
ware running on the soon-to- 
be-discontinued Windows NT 
operating system. 

The program, announced 
last week, offers free migra- 
tion classes and some dis- 
counts on software and ser- 
vices for users moving to IBM 
software running on Linux. 

Microsoft will discontinue 
support and security patches 
for Windows NT at the end of 
this year, requiring nearly 2 mil- 
lion customers to develop a 
migration strategy, IBM said. 

IBM's classes will be of- 
fered worldwide and will cover 
migration to the company’s 
hardware and software for 
needs such as database man- 
agement, collaboration, secu- 
rity, systems and network 
management, Web and appli- 
cation serving, and file and 
print serving. 

IBM is also offering dis- 
counts on Lotus Domino run- 
ning on Linux for any IBM 
eServer, including its zSeries 
mainframe, to customers mov- 
ing from Windows applica- 
tions like Microsoft Exchange. 

Special programs are also 
being offered for migration 
from Microsoft SQL Server to 
DB2 Universal Database on 
Linux and for security and net- 
work management migrations. 

IBM's timing is good, said 
James Governor, principal an- 
alyst at Bath, Maine-based 
RedMonk LLC. “Users are 
definitely looking at Linux to 
reduce their total cost of own- 
ership around Windows, and 
at the same time IBM is savy 
to the fact that it can make ex- 
tra money on pieces of soft- 
ware and services,” he said. 

Microsoft officials weren't 
available for comment. 


Pruitt writes for the IDG 
News Service. 
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Health Care Firms Turn to 
Blades to Meet Privacy Rules 


Centralized technology helps secure 
patient data, eases systems management 





BY BOB BREWIN 
WO HEALTH CARE 
companies are rely- 
ing on blade com- 
puting technology to 

help them comply with the pa- 

tient data privacy rules im- 

posed by the federal Health 

Insurance Portability and Ac- 

countability Act (HIPAA). 

Beverly Enterprises Inc., a 

Fort Smith, Ark.-based nursing 

home operator, last week said 

it’s using Citrix Systems Inc.’s 

MetaFrame Access Suite soft- 

ware running on blade servers 

made by Hewlett-Packard Co. 
to provide its 57,000 nurses, 
clinicians and other employ- 
ees with access to clinical and 


| patient billing applications. 





Beverly expects to save mil- 
lions of dollars in IT costs by 


| consolidating its application 


infrastructure on about 30 
two-processor HP ProLiant 
blade servers, which are in- 
stalled at the company’s data 
center in Fort Smith. 

The new architecture also 


| provides “a very locked-down 
| environment” that’s aimed at 


meeting HIPAA’s privacy re- 


| quirements, said David Valcik, 
| vice president of technical ser- 


vices at Beverly. 

Oklahoma Heart Hospital 
announced earlier this month 
that it’s using blade systems as 


| part of its HIPAA compliance 


Cisco Tailors Switches for 
Metro Ethernet Networks 


Devices include 
quality-of-service 
support, redundant 
power supplies 


BY MATT HAMBLEN 

Cisco Systems Inc. last week 
announced a pair of switches 
that support Ethernet-based 
metropolitan-area networks 
and are aimed at network ser- 
vice providers looking to offer 
new capabilities to their busi- 
ness customers. 

The Catalyst 3750 Metro Se- 
ries switches have more intelli- 
gence than Cisco’s existing de- 
vices and include the ability to 
provide quality-of-service 
guarantees to users, said Wes- 
ley Mukai, a product manager 
at the vendor. That means the 
switches can do things such as 
segment data traffic and give 
voice-over-IP transmissions 
higher priority than data trans- 
fers, he added. 

The new products, which 





are specialized versions of 
Cisco’s enterprise-class Cata- 
lyst 3750 switch line, also in- 
clude redundant power sup- 
plies. Service providers can 
buy the switches and install 
them at their customers’ facili- 


| ties, Mukai said. 


Song Networks Holding AB, 
a Stockholm-based company 
that provides voice, data and 
Internet services to business 


| customers in Scandinavian 
| countries, is testing a 3750 
| Metro switch. Based on several | 
days of tests, the switch “would | 


fit in very well with our MPLS 


core network,” said Song se- 
nior engineer Anders Thorzen, | 


referring to Multiprotocol La- 

bel Switching technology. 
Thorzen said Song is build- 

ing metro Ethernet LANs and 


| wants to support Internet ser- 


vices as well as virtual private 
networks based on either IP 
or Ethernet within a single 
switch, which would be possi- 
ble with the 3750 Metro. 

But cost could be an issue, 





strategy. In a project that start- 
ed early last year, the Okla- 
homa City-based cardiac care 
facility installed about 120 PC 
blade devices made by Austin- 
based ClearCube Technology 
Inc., said Jeff Jones, leader of 
the hospital’s MIS team. 


Safeguarding Data 

Jones said ClearCube’s tech- 
nology lets Oklahoma Heart 
put “dumb” terminals in pa- 
tient rooms and connect them 


| to PC blades that are installed 


in a secure computer room. 
The setup ensures that a PC 
containing medical records 
and other personal data about 
patients “does not walk out 
the door,” he noted. 

In addition, ClearCube’s 
C/Port terminals don’t have 
fans that could spread air- 


| said Thorzen, who said he did 


not know the price of the new 

switch until he started testing 

it. “The price is quite high, so I 
can’t say if we’d buy them,” he 
said, noting that Song would 


need to purchase the basic box | 


as well as an advanced IP fea- 
tures license for a total cost of 


| nearly $20,000 per switch. “I'll 


PRODUCT DETAILS | 
| | 


Catalyst 3750 
Metro Series 


@ Includes two rack-mounted 
models, one that runs on AC 
power and one that’s DC- 
powered 


& Offers 24 10/100 Ethernet 
ports, plus two small ports 
for Gigabit Ethernet access 
and two more for enhanced 
network services 


= Supports maximum 
forwarding bandwidth of 
32Ghit/sec. in Layer 2 and 
3 switching fabrics 


PRICING: Starts at $6,995 for 
the AC model and $7,985 for 
the DC version 
AVAILABILITY: Due for release 
by month's end 


borne contaminants. That was 
another key factor in Okla- 
homa Heart’s decision to use 
the PC blades, according to 
Jones. He declined to say how 
much the project cost the hos- 
pital, which is also using the 
terminals in its operating 
rooms. 

Rob Enderle, an analyst at 





have to talk to the Cisco sales 
| rep about possibly getting a 
lower price,” Thorzen said. 

Cisco already dominates the 
| metro Ethernet switching 
market “by far,” said IDC ana- 
lyst Sterling Perrin, although 
he declined to disclose market 
share data. But the 3750 Metro 
switches should further en- 
hance Cisco’s competitive 
standing against rivals like 
Nortel Networks Ltd., Foundry 
| Networks Inc. and Extreme 
| Networks Inc., Perrin said. 

The new line adds more ro- 
bust quality-of-service and re- 
liability features to the main- 
stream Catalyst 3750 switches 
and is being offered as part of 
Cisco's strategy to sell more 
| products to service providers, 
| according to Perrin. 

Having first emerged in 
2001, metro Ethernet technol- 
ogy has caught on mainly be- 
cause it lets customers buy 
VoIP and other data services 
at a lower cost than leasing 
private lines, he said. IDC 
predicts that worldwide sales 
of metro Ethernet equipment 
will exceed $2.4 billion this 
year, up from about $1.4 billion 
| in 2003. @ 44226 
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CLEARCUBE'S C/PORT terminals connect to centralized PC blades. 


Enderle Group in San Jose, 
said the health care industry 
as a whole appears to be mov- 
ing toward an IT architecture 
based on centralized servers 
and thin clients. The main 
goals are to ensure the securi- 
ty of patient records and sim- 
plify systems management, 
Enderle said. 

/alcik wouldn't disclose 
cost or return-on-investment 
figures for Beverly’s Citrix and 
blade server installation. But 
he said the company would 
have had to buy new PCs and 
servers for its 400 or so elder 
care facilities if it hadn’t in- 
vested in the blade technology. 
The centralized system has 
also reduced the time required 
to run patient reports from six 
hours to 15 minutes, he noted. 

In addition, Beverly used 


| the system to remotely provi- 


sion Citrix’s software during 
the installation process, said 
Don Griffin, the health care 
company’s director of infra- 
structure research and devel- 
opment. He added that soft- 
ware installations were done 
by “a flip of a switch” as Bev- 


| erly rolled out Citrix’s tech- 
; nology to about four facilities 


and 150 to 200 end users per 
week after launching a pilot 
project early last year. 

At Oklahoma Heart, Clear- 
Cube’s terminals provide doc- 
tors with easy access to elec- 
tronic medical records, phar- 
macy systems and other appli- 
cations, Jones said. He added 
that the terminals can also be 
used to call up images such 
as X-rays. @ 44265 
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SAS, the leader in business intelligence software, challenges... 
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With Sarbanes-Oxley compliance deadlines less than a year away, there is an urgency to deliver financial 
and operational transparency — one clean, consolidated and truthful version of data for all your disclosure 
controls and procedures. SAS" Corporate Compliance software provides auditable, searchable process 
and document control solutions. So you can prepare now, while creating a system that won't be outdated 
when the next new legislation is enacted. Our intuitive interfaces are designed for users of any skill level 

with a central point of control to manage across all environments — and an open, adaptable architecture 
To find out more about how to confidently comply with Sarbanes-Oxley, including Section 404, call us 


toll free at 1 866 270 5729 or visit our Web site. 


www.sas.com/sox 


The Power to Know. 2 SdS. 
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2003 SAS Institute Inc. All rig ved. 256063US.1003 
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PeopleSoft Drops 
Third-Party Tools 


PeopleSoft Inc. said it’s switching 
from Informatica Corp. to Ascen- 


tial Software Corp. as the supplier 


of the data extract, transform and 
load tools bundled with its analytic 
applications. But the change to 
Ascential’s software will be trans- 
parent to users, PeopleSoft added. 
It said existing customers can 
continue to use the tools devel- 
oped by Informatica. 


CA Reports Profit 
On Increased Sales 


Computer Associates Internation- 
al Inc. reported a $22 million 
profit for its third quarter, which 
ended Dec. 31. Revenue rose 12% 
year over year, and CEO Sanjay 
Kumar said he is “encouraged by 
signs that technology spending is 
gradually increasing.” 


BY THE NUMBERS 


| 


PalmOne Lays Off 
12% of Its Workers 


PalmOne Inc. announced a layoff 
of about 100 employees, reducing 
its workforce by 12% and leaving 
the Milpitas, Calif.-based maker 
of handheld devices with a total 
of 740 workers. Two engineering 
teams that develop wireless and 
handheld products bore the brunt 
of the job cuts after they were 
consolidated into a single group, 
according to PalmOne. 


Short Takes 


SAP AG said revenue fell by 3% in 
last year’s fourth quarter, as fore- 
cast. But the company added that 
it expects software license sales 
to increase by about 10% this 
year... . EMC CORP. reported a 
fourth-quarter profit of $220 mil- 
lion and said the U.S. DEPART- 
MENT OF DEFENSE plans to buy 
$44.3 million worth of its storage 
hardware and software. 





Continued from page 1 


LinuxWorld 


won't offer any such program 
because it doesn’t believe in- 
demnification is needed (see 
story below). 

Users were less certain. 

Rudy Ebisch, assistant tech- 
nical support director for 
core systems in the IT divi- 
sion of Canon USA Inc. in 
Lake Success, N.Y., said legal 
concerns are definitely a fac- 
tor as his company eyes Linux | 
as a possible alternative in a 


| migration from multiple op- 
erating systems. 


“That’s the No. 1 question 
my general manager asked 
when I was coming here,” 
Ebisch said. So far, Canon is 
trying out Linux only for proj- 
ects such as experiments with 
network monitoring tools. But 
as major vendors, including 
Hewlett-Packard Co., Novell 
Inc. and Oracle Corp., adopt 


| Linux strategies, Canon’s op- 


tions continue to expand. 

“It makes it legitimate,” 
Ebisch said. “I’m not taking 
the risk I would have a year 
ago” by moving to Linux. 

Richard Teasdale, a Unix 
administrator at a U.S.-based 
insurance company that he 
declined to name, said indem- 
nification programs “make it 
more palatable” to consider 
Linux. But he said that’s just 
one of many issues that must 
be considered. 

“T don’t think it’s a make-or- 
break issue,” Teasdale said. 
“We're looking at it. We’re un- 
der tremendous pressure to 
reduce costs, so we’re looking 
at every way ... and Linux is 
one of them.” 


Conservative Pace 
Colt Jackson, a systems engi- 
neer at CareFirst Inc., an Ow- 
ings Mills, Md.-based health 
insurance company, said IT 
planning in the insurance in- 
dustry moves at a conserva- 
tive pace. As a result, indemni- 
fication programs are helpful 
but won’t likely trigger a mass 
migration. 

Health insurance companies 
“want to have a track record 
for technologies they put in 





| place, but they don’t want to 


create that track record them- 
selves,” Jackson said. “They 
definitely want to limit risks.” 

Another user, an enterprise 
architect at an East Coast fi- 
nancial services company who 
asked to remain anonymous, 
said indemnification is indeed 
meaningful. 

“It actually is something we 
were really concerned about. 
We were in the process of 
putting together a position pa- 
per on Linux when the [SCO] 
lawsuit hit, and we put it on 
hold,” he said. “But to have 
companies step to the plate 
and say they’re having indem- 
nification programs meant 
they were acknowledging and 
dealing with the problem.” 


Unanswered Questions 
Questions remain, however. 
“We're not coming away from 
this with any big reasons not 
to [move to Linux],” said the 
enterprise architect. But be- 
cause it will likely take years 





& [Whether 
there’s a legal 


liability problem] is 
the No. 1 question 
my general manager 
asked when | was 
coming here. 


for the legal issues to be re- 
solved, “it’s important for the 
companies that believe in 
their [Linux] products to back 
them up with indemnifica- 
tion,” he added. 

Alex Drought, head of tech- 
nology for movie editing work- 
ers at Blue Sky Studios Inc. in 
White Plains, N-Y., a unit of Fox 
Filmed Entertainment, said in- 
demnification means little in 
his business, since film studios 
can quickly turn to other oper- 
ating systems like Apple Com- 
puter Inc.’s Mac OS X in the 


Defiant IBM Calls Linux 
Indemnification Unnecessary 


Open-source OS 
use continues to 
grow, despite legal 
threats by SCO 


BY TODD R. WEISS 


| NEW YORK 


While Novell, Sun Microsys- 
tems, Hewlett-Packard and 
Red Hat are all offering in- 
demnification programs to 
protect customers from possi- 
ble legal threats stemming 
from their use of Linux, IBM 
has quietly remained on the 
sidelines. 

But on the opening day of 
the LinuxWorld Conference & 
Expo here last week, IBM pub- 
licly weighed in on the issuc, 
arguing that there’s no need 
for it to indemnify its growing 
pool of Linux customers. 
IBM’s rationale: The ongoing 
$3 billion lawsuit filed against 
it last March by The SCO 
Group is baseless. 

“Our position hasn’t 
changed,” said Jim Stallings, 





IBM’s general manager for 
Linux. “The claims that have 
been alleged [by SCO] against 
IBM [have] no basis,” so in- 
demnification is not needed. 
Even if customers still have 
concerns, both major Linux 
distributions — SUSE Linux 
and Red Hat Enterprise Linux 


| — include customer protec- 
| tion programs to help defend 


users against legal actions 
from SCO, Stallings said. In 
addition, the Open Source 
Development Labs (OSDL), 

a nonprofit enterprise Linux 
advocacy group, has begun 

a defense fund that it hopes 
will bring in $10 million for 
users entangled in any related 
legal fights. 

Use of the operating system 
among businesses has contin- 
ued to grow, despite SCO’s re- 
cent threats that it could soon 
begin suing enterprise Linux 
users, Stallings said. “They 
voted,” he said of customers 
who have deployed Linux. 
“Given what’s there, cus- 
tomers have made up their 








event of legal problems such as 
the SCO lawsuit. 

That’s different from the sit 
uation at financial services 
and insurance companies, 
where a quick change isn’t 
possible because of the depth 
of their IT integration and ar- 
chitectures, Drought said. 
“They cannot turn on a dime 
if things change overnight,” he 
said. “They would really be in 
a tough position.” 

Red Hat Inc. last week said 
it will offer a plan that it calls 
the Open Source Assurance 
Program to protect all existing 
and future Red Hat Enterprise 
Linux customers from legal 
challenges as long as they’re 
using the software [QuickLink 
44168]. 

Red Hat’s move came on the 
heels of a decision a week ear- 


| lier by Novell to indemnify 
| SUSE Linux AG customers 
| against possible legal action 


from SCO [QuickLink 44020]. 


| @ 44259 


minds by the thousands” and 
don’t feel threatened by SCO’s 
legal challenge. 

Matt Plociak, an analyst at 
Progressive Strategies Inc. in 
New York, said IBM’s argu- 
ment makes sense. 

“To me, if you offer indem- 
nification, you’re saying there 
may be a problem,” he said. 
“IBM is saying there is no 
problem and [that they’re] 
going to prove that in court. 

I think that’s a reasonable 
strategy, and obviously their 
customers are confident with 
that” because they haven't 
stopped buying and using 


| Linux. 


Al Gillen, an analyst at 
Framingham, Mass.-based 
IDC, said that while IBM con- 
tinues to pass on indemnifica- 
tion, the company has donated 
money to the legal defense 


| fund created by the Beaverton, 


Ore.-based OSDL. “I don’t 
think there’s any real need to 


| provide any indemnification 


until they have a customer 
who’s in some form of litiga- 
tion” in connection with 
SCO’s claims, Gillen said. 
“Then the pressure would in- 
crease for them to do some- 
thing.” @ 44260 
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Thinking 


Your Business, Your Way. 


You want to think outside the box. 
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Now more than ever you need to control costs. Software solutions implemented straight out of the box may appear cheay 


Your budget calls for “out of the box” 7 
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| What's the future of your Con- 


tinuum servers? We continue to 
sell our legacy line. And the 
reason we do is 
because a lot of 
our applications 
are very “sticky” 
to the platform. 

In the late 
1980s and 1990s, 
we sold our 
product to cus- 
tomers that ran 
their most mis- 
sion-critical ap- 
plications on our box. And 
once it’s up and running, our 
customers tend not to want to 
change it. If you make an 800 
call in the United States, it 
goes through a Stratus box. 


Will your legacy users be facing 
an end-of-life scenario at some 
point? We continue to upgrade 
the Continuum platform. For 


| our VOS customers, we're ac- 


tually taking the operating sys- 
tem and migrating it on to the 
ftServer, our Windows-based 
server platform. 


How important is the ftServer to 
Stratus? That’s where all our 
new business is coming from. 
We started shipping it in June 
2001, and since then we’ve 
sold it to over 850 new cus- 
tomers. If you look at the five- 
year period before we intro- 
duced ftServer, we were lucky 
if we had 20 [new] customers. 


What are you doing about Linux? 
In June, our plan is to release a 
Linux [offering] on ftServer. 
This will primarily be focused 
on the telco marketplace. In 
1998, telco was 50% of our 
business. Now it’s about 25%. 
With this new Linux ftServer, 
we're really excited about dri- 
ving some growth in the telco 


area. @ 44223 
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Read the full interview on our Web site 
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MARYFRAN JOHNSON 


nspeakable Candor 


FTER SPEAKING ON A PANEL at a retail 
conference in New York recently, the 
CEO of Sears caught all kinds of hell for 
what amounts to unspeakable candor 
about offshore outsourcing [QuickLink 44157]. 
Not only did Alan Lacy talk all too frankly about 
the financial attractions of going offshore, but he 


also doubled his trouble by 
unfavorably comparing the 
intellect and drive of 
American workers with 
their overseas counter- 
parts. “There are four or 
five times as many smart, 
driven people in China 
than there are in the U.S.,” 
he said. 

What the chief executive 
meant to say, his PR trou- 
bleshooters scrambled to 
explain in their apology af- 
terward, was that coun- 
tries with populations several times 
the size of the U.S. naturally have 
much greater numbers of educated 
and motivated workers. And like so 
many other U.S. companies looking to 
reduce IT costs, Sears is looking to 
outsource part of its infrastructure 
this year and is considering all of its 
options 

What the Sears CEO may have 
learned last week is that candid, open 
discussion about offshore outsourcing 
is the new corporate taboo. Nothing 
will be more politically incorrect this 
year than expressing interest in off- 
shoring. 

The topic has become a hot button 
on the national political stage, where 
the Democratic presidential hopefuls 
have taken up the cause of unem- 
ployed IT workers displaced by out- 
sourcing contracts. Legislation is be- 
ing proposed in Indiana, Michigan and 
New Jersey to block state IT contracts 
from using foreign labor. 

Last week, The Wall Street Journal 
published a story about an internal 
IBM memo that described plans to 
shift several thousand programming 
jobs overseas. The article included 
embarrassing details about a suggest- 
ed HR script to be used when inform- 
ing employees that they were out of a 


job. And an Associated 
Press story about an out- 
sourcing conference in 
New York reported that a 
consultant from McKinsey 
& Co. barred reporters 
from covering his talk, 
which was called “Is Off- 
shore Outsourcing Unpa- 
triotic?” Some Indian soft- 
ware companies that once 
publicized their new U.S. 
customers no longer do 
so, for fear of adverse 

' publicity. 

What is often overlooked in the 


| emotional, angry reactions to offshore 


outsourcing is how small a percentage 


| it really occupies in the huge global 


outsourcing market. Analyst firm 


| Datamonitor just released figures 
| showing that offshore contract work 
| made up only 1.4% of the $119 billion 


spent on IT services deals in 2003. 
Yet despite the chill descending on 


YOu tNow, THERE ARE four 


OR FiVE TIMES AS MANY SMART, FS 


DRIVEN PEOPLE IN CHINA THAN 
THERE ARE INTHE U.S. 
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SEARS CEO 
ALAN LACY 


Pe 


ee 


| public discussion of offshoring, the 
| trend continues to accelerate. Global- 


ization is well under way — and large- 


| ly enabled by IT, in fact. 


The list of big-name companies 


| with established or planned offshore 


outsourcing projects includes IBM, 
Hewlett-Packard, Oracle, Time Warn- 


| er, Disney, Siebel, Microsoft, Yahoo, 


| 
| 
| 
| 
| 


MasterCard, Google, Accenture, CNN, 
Target, Bank of America and Intel. 
More than eight out of 10 software 
companies will be exporting work off- 
shore this year or next, according to a 
recent study by research firm Sand 
Hill Group. 

Successful offshore projects can 
save companies money, but the hidden 
costs and management pitfalls range 
from underestimating transition costs 
and additional travel expenses to se- 
curity concerns, rising overseas labor 
costs and IT governance problems. 

What troubles me most about the 


| political backlash and the growing 


self-censorship around this topic is 


| the inevitable stifling effect on honest 


information exchange. At a time when 
more companies are gaining experi- 
ence — both good and bad — with off- 


shore firms and outsourcing contracts, 


fewer companies are going to be will- 
ing to share those experiences. 

To me, that’s far more unspeakable 
than the foot-in-mouth candor of the 


| Sears CEO. @ 44225 


" AND MAYBE ONE OF THEM 
CAN FIGURE A WAT OUT oF 
THIS PR. NIGHTMARE. 
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Open-Source 
Model for 
Outsourcing 


T DOESN’T TAKE an MBA 

to know that you can save 

money paying a salary of 
$20,000 for IT skills in India 
vs. $80,000 in Indianapolis. 


That’s why the outsourcing movement 
now encompasses software creation, 
not just support and maintenance. 

According to a Meta Group study, 
41% of all new application develop- 
ment, whether involving Cobol, .Net, 
C# or C++, is happening offshore. And 
the Fortune 100 are increasingly de- 
pendent on distributed talent. But us- 
ing offshore programmers requires so- 
phisticated communication and collab- 
oration technology. Without it, the cost 
of managing outsourced application 
development can easily strip away any 
savings you get from 
salaries. 

Unfortunately, 
such technology is 
still in its infancy. 
But there is one tool 
that suggests how 
offshore develop- 
ment can be man- 
aged: the Source- 
Forge.net Web site. 
Run by Fremont, 
Calif.-based VA Soft- 
ware Inc., the site 
hosts thousands of projects for free, 
serving as an open-source develop- 
ment platform for project teams as 
well as a real-time monitor for execu- 
tives and partners. 

Richard Christopher, delivery man- 
ager at Allstream Corp. in Calgary, Al- 
berta, uses this repository of open 
source code and applications as part of 
his effort to manage integration work 
for clients in the oil and gas industries. 
“My role entails ensuring an IT project 
has the appropriate resources and is 
delivered on time and on budget,” 
Christopher says. 

Using SourceForge.net, Christo- 
pher’s team manages code, content and 
process. The tool alse handles docu- 
ment management and version control. 
From his clients’ perspective, it’s easy 
to perform acceptance testing, log de- 
fects and bugs, and assign priorities 
tagged with notes. “The nice thing is a 


PimM FOX is a freelance 
writer in Santa Barbara, 
Calif. Contact him at 
pimmtox@pacbell.net. 
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We know your time is precious. That's why at Softchoice, we deliver the answers you ne 
without the obstacles. We'll give you immediate access to smart people who will pick up the phone 


whenever you call. No automated phone systems. No hassles. Novel concept, don’t you think? 


For software or hardware to run your business, think Softchoice. We can save you time, 
money and maybe even your sanity. 
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Even with today's security concerns, hunkering down behind your firewall is hardly the way 
forward. Not when you can be taking advantage of all the opportunities the open road has 

to offer. Whether you're looking for mobile security and backup software, or hardware solutions 
to thwart even the most determined criminal, Softchoice has what you need to conduct business 
securely no matter where you are. So what are you waiting for? Get out there and share! 
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Secure Your Wireless Network Lock It and Leave It 
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Symantec Client Security: 
Allin One 


Are you worrying about vulnerable remote laptops outside your perimeter? 
Are you concerned about the next time a client unknowingly downloads a 
virus and then logs back in? Put these fears to rest, once and for all 


The beauty of Symantec's new integrated client security solution is that it 
delivers protection for network and remote clients alike - all managed from a 
single console. Symantec” Client Security is the first integrated, easily 
managed protection for your client workstations, laptops and remote users. It 


3 symantec. offers industry leading security technologies -intrusion detection, client 


firewall and virus protection -in one integrated, manageable solution 


Learn more at www.softchoice.com/browser 


1.877.967.3737 | softchoice 
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Inspec 


Analyzing your environment’s attributes and activity can help you build a clearer, more productive IT future. 
Having easy access to inventory data on the software and hardware running on your network, along with 
detailed reports on bandwidth and application usage are keys to successful and cost-efficient IT decisions 
These solutions can help you reduce IT expenditures, enhance security and performance, and make change 
management a veritable walk in the park. 
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To learn more about Management Suite 8, visit www.softchoice.com/browser 
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Complete View 
of IT Assets 


Express Software Manager from Express 
Metrix provides a comprehensive view 
of IT assets and lets you understand 
what you own, and who is using it 
Quickly inventory and control IT assets 
from a central location, and use the 
powerful reporting engine to see 
inventory data together with software 
usage Statistics in over 65  pre- 
configured reports 
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CREATIVE JUICE 


Step Into 


The World 
of Windows 
Graphics 


It's good to get noticed. It’s even better to stand out 
from the crowd. Whether for print or the web, a little 
creative juice can help you deliver eye-popping 
creations that will leave a lasting impression. With time 
saving solutions, integrated capabilities, and high- 
powered printers for a cost-conscious market, we've got 
the tools you need to grab people's attention—without 
breaking the bank. 


Learn more at www.softchoice.com/browser 
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Feature: 


Effective Patch 
Management 


Recent security outbreaks like SoBig.F and W32.Blaster 
have changed the way people think about patch 
management. It's not surprising when you consider that in 
the majority of cases, having a recent patch could have 
helped avoid these disasters altogether. So why not take 
control? With solutions to help you stay aware of the 
latest updates, assess your vulnerabilities, and then 
deploy security patches to where they're needed, you'll 
never have to rely on hindsight again! 


Drill down into more information at: 
www.softchoice.com/browser 


Patch Management Made Easy with Microsoft 
Software Update Services 


Software Update Se s SUS enables administrators to quickly and reliably deploy the latest critical updates, 
security updates and Wind e packs (SPs) to Windows 2000 and Windows Server 2003-based servers and 
desktops running Windows 2000 Professional or Windows XP Professional. SUS is a no-charge add-in component for 
Windows Server available for download direct from Microsoft 
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Systems Management Server 2003 (SMS) provides a comprehensive solution 

for change and configuration management for the Microsoft platform, enabling 

and updates to users quickly and cost-effectively. SMS 2003 delivers the 

sary tools to enable enterprises to stay aware of the latest updates, identify software vulnerabilities, and then 
quickly and easily retrieve and deploy the update in an accurate, verifiable and controlled manner. 


Microsoft 
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Proactive Patch Management 
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Prevent Attacks Before They Occur 


Symantec DeepSight Alert Services provides personalized vulnerability and malicious code alerts to bridge the 
gap between awareness and action. The service delivers notification of vulnerabilities as they are identified, providing 
distinct product versions and information from 

update, describing it's severity and potential impact, technical makeup, the systems that might be affected, available 


timely and actionable information to help users distribute patches and updates immediately. Symantec analysts monitor 
more than 150 authoritative sources. They 
patches or workarounds, and comprehensive mitigation strategies. For a free 30 day trial of the service, go to 


potential threats across more than 18,000 

Symantec™ DeepSight™ Alert Services 
provide a detailed analysis in each alert and 
www.softchoice.com/browse? suv iv 01-02 us: sa0s 
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A Holistic Approach to 
Preventing Blended Threats 


Symantec Enterprise Security Solutions incorporate the latest technology in addressing blended threats such as Sobig 
and Blaster. Through integrated protection and response capabilities, customers were able to prevent Blaster and Sobig 
from ever infecting their systems. With Symantec DeepSight Alert Services, administrators receive early warning of new 
vulnerabilities. Symantec Gateway Security and Symantec Client Security prevent networked systems, as well as remote 
offices and telecommuters, from being infected. Viruses and worms are blocked by default in these integrated, best-of- 
breed security solutions. For a white paper on this comprehensive approach, go to: www.softchoice.com/browser 
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Take Control with IBM 


IBM Tivoli Configuration Manager can help you gain 
total control over your enterprise software and 
hardware. Its software distribution module can give 
you the ability to rapidly and efficiently deploy 
complex mission-critical applications to multiple 
locations from a central point. After systems have 
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Better Patch 
— Management with 


Wyse Alcatraz 


As the summer 2003 worm attacks showed, not all virus problems 
can be solved by anti-virus software. Hackers are writing malicious 
code that can only be prevented by an operating system patch. Patch 
management is now as critical to an enterprise security plan as 
keeping virus-definition files up to date. 


The Ultimate in PC Control | 
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Solve these Patch Management Challenges 


«Relying on users to do manual updates from emailed instructions 


¢Mixed OS environment with different patches needed. Some support 
automatic updates, others don't 


*Not all users have automatic update turned on, and nothing prevents 
them from turning it off 


eViruses are spreading by pretending to be Microsoft patches 


¢Your automatic update can't pick and choose the updates you want 
Some updates break applications; others make systems unstable 


*Mass automatic updates are a bandwidth nightmare 


softchoice | WWW.SOFTCHOICE.COM/BROWSER 





ed 










Mr. Jones likes 
his espresso long, 
with 2 sugars. 





Ta adie 


Keeping customers like Mr. Jones happy is all about knowing what With HP's tested hardware configuratic 1 familiar, industr. 
they want, when they want it. Simple, right? 2 only trouble is Standard user interface providing a foundation, tt w Micr 

that until recently, the technology needed to track c SI CRM solutior in easy way for any sized organization 
requests, manage support issues and provide consistent, efficient t power individuals, teams, and management to have more 
service has n the domain of large enterp with plent productive and successful relationsh vith customers, just like 
of bandwidth and deep, deep pockets 

Not so anymore. Through the combined expertise of Microsoft and | 1 more abou ging the iplete CRM solution 


HP, establishing an e ve CRM solution is now simpler and Aicrosoft and HP. call 1.800.268.7638 or visit 


more cost-effective than ever before Cay - www.softchoice.com/browser for details 
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Microsoft & HP: A Winning Combination 


SMART MONEY | 


aving is Believing 


One of the easiest ways to reduce overhead costs is to eliminate redundancy. That means consolidating 
resources, finding innovative ways to extend the use of existing technology and identifying new, multi- 
purpose tools to help you free up elbow room, save money or both. When it comes to matching your IT 
resources with real business needs, it just doesn’t get any better than this 


Serve More With Less 


fone is better. And doing r h less doesn't ha yme at the expense 

dugh Microsoft Se consolidation, you have the 
aes to reduce the ) 0 tforms and improve the overall 
manageability of your IT eorucs ture. The fit to you? Higher ¥F availability 
increased flexibility and better alignment between IT resources and business 
goals. Since when did doing more with less look so good? 


The key to consolidating your current environment is to have a standard process 
for planning, designinc oying, and managing the project 


For more information on how you can serve more 


with less, visit www.softchoice.com/browser Microsoft 
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Server Consolidation 
VERITAS StorageCentral™ is a powerful storage 
* Reduces hardware and resource management solution that will heip 
software purchases you reclaim storage & block unwanted files, 


reducing backup and disk costs. You'll also 
reduce network traffic by eliminating duplicate, 
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eS UAL rede StorageCentral backups. And finally, with less data backed up, 
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Is Your Printing Cost-effective? 


Using that outdated printer may be c 1g you money. Although it still works fine, 
probably not working to save money or impr productivity. HP's 
nmitment to innovative Prin Imac products has resulted in the 
uction efficient printing devices which have increased productivity and 

red the users’ operating cost 


In fact, analysts* agree that companies should scrutinize the total cost of printing, 

which includes not just the printe ch orice, but ongoing s of supplies, 

power and servicing. They cite ev ing new technologies, and putting the right 

number ices in the right location as important strategies to boost productivity 
ignifica 
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With CA's New BrightStor is a 5-in-1 networkable 
Storage Resource Manager 6.4 ser multifunction 
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Enterprise Class Virtual Machines 


ver is an enterprise-class virtual machine software for busin 


critical environments. In its third generation, are GSX Server is one of the 
most flexible and easily deplc server virtualization products on the market 


Enterprise customers rely on > GS rver to deliver server scalability 


IT 


reliability, and high availabili to maximize return on IT investments 


product is used ac he enterprise to 


Implement server consolidation 
Deliver high availability 
- Provision servers rapidly 
Streamline training and demo center operations 
- Improve software help desk and technical support operations 
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Earn up to $38,000 cash back! 
Purchase Microsoft Office 20 
with licen and Software 
Assurance by April 30, 2004 
and receive a rebate up to 
$38,000 cash back directly from 
Microsoft. Contact your Softchoice 
Rep for full details 
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Solve productivity challenges 
oe - O N N a C a with Microsoft Communication 
and Collaboration solutions. 


Get Smarter 


In a perfect world, no matter where they are or what method they 
use, your best and brightest are collaborating freely using the most 
current information available. That means smarter decisions, 
improved timelines and greater productivity. Where Microsoft is 
concerned, that world is closer than you think. With a comprehensive 
set of communication and collaboration solutions, achieving the 
ultimate goal of increasing information worker productivity is now 
well within reach. 


Through Microsoft Windows® SharePoint” Services, Microsoft Exchange 
2003, Microsoft SOL Server™ and Microsoft Office Professional Edition 2003 
your organization can achieve 


Team Collaboration - Shared workspaces allow employees, customers, 
partners, and suppliers to achieve improved timeliness and productivity in 
creating documents and completing transactions 


Integrated Communications - |t's al! about the information, especially 
when it's delivered in real time, anywhere and from any device, via e-mail, 
group scheduling, conferencing, instant messaging, and enhanced file and 
printer sharing. 


Mobile Workforce - Keep your people moving with mobile collaboration and 
communication solutions guaranteed to increase the experience of remote 
team activities through easier access and connectivity. 


Transforming your business into a smart, connected organization is easy 
when you give your people familiar, user-centric productivity tools. For more 
information on how Microsoft Windows SharePoint Services, Microsoft 
Exchange 2003, and Microsoft Office Professional Edition 2003 can help 
enhance communication and collaboration in your organization, visit 
www.softchoice.com/browser or call 1.877.967.3737 
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Creating an agile business means having easy access to current, 
actionable information. The equation is simple: the better your 
understanding of the latest trends, the-easier it is to drive 
performance. Whether your focus is the web, the enterprise or 
both, these solutions can give you the insights you-need to stay 
ahead of the curve. 
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WebTrends web analytics solutions let you make the 
most of what's working on your web site and fix 
what's not. From content and navigation to campaigns 
and search engine marketing, WebTrends provides the 
insight you need to be more 

effective on the Web. You'll 

be able to acquire more 

S, convert them into 

and retain them 


To learn more, visit 
www.netig.com/go/browser 
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pursue important things, like finding a new 
source of income 
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Start protecting your business today. 
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The right software gives you big business protection 
without costing big bucks. 





www.computerworld.com 


user can see what happened yesterday 
and why,” he says. “We’re not waiting 
for the Monday morning status meet- 
ing or phone call.” 

The open-source nature of Source- 
Forge.net also carries benefits. 

As open-source development prolif- 
erates, people will contribute to exist- 
ing projects, producing additional 
functions and new security features. 
Stan Carney, a consultant working with 
Allstream, tells me that as each project 
gets rolling, the open-source commu- 
nity comes and adds the changes it 
needs without having to invest in a 
ground-up development program. “It 
brings software development closer to 
traditional engineering,” he says. 
That’s because “code is no longer hid- 
den in a black box that can’t be in- 
spected.” 

The more that open source code 
moves into the enterprise, the greater 
transparency — and accountability — 
there will be in development. That 
places the emphasis even more square- 
ly on people with project management 
skills, whose jobs will remain close to 


home. @ 44148 
DAVID MOSCHEI 


Revenge of 


The Dot-coms 


TARTING a few years 

ago, we were all sup- 

posed to laugh at the 
dot-coms. How could anyone 
ever have believed, let alone 
invested in, their pie-in-the-sky theo- 
ries and imaginary business plans? 
Surely, after the collapse of the Inter- 
net bubble, we would all come back to 
our senses, and normal patterns of 
business leadership would resume. 

Of course, no one is laughing any- 
more. The reality is that in an expand- 
ing range of sectors, the dot-coms are 
getting the better of their pre-Web ri- 
vals. Companies whose very survival 
was recently questioned have turned 
the tables and are now threatening the 
survival of others. It’s been an impres- 
sive recovery. 

Consider just a few of the most 
prominent examples. Amazon.com has 
crushed Barnes & Noble and has suc- 
cessfully expanded into many forms of 
retail. Google and Yahoo/Overture 
Services dominate the online advertis- 
ing business. Expedia maintains a 
healthy lead over the airline industry 
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joint venture Orbitz. 
Kazaa.com and Apple’s 
iTunes have all but elimi- 
nated the offerings of the 
music industry giants. Pay- 
Pal and eBay control the In- 
ternet funds-transfer busi- 
ness. WebMD remains the 
leading health care site. 

Of course, there are other 
industries — such as news, 
banking and investing — 
where established pre-Inter- 
net firms are also online 
leaders, as well as individual 
online successes from other 
industries, such as Dell (computers) 
and Wal-Mart (retail). But when it 
comes to creating major new services 
and important 
new forms of value, the start-up com- 
panies continue to have the edge. 
While this is especially true in con- 
sumer markets, the same pattern has 


generally emerged even in business-to- 


business markets. 

Perhaps even more noteworthy, the 
strategic impact of the dot-coms is 
now starting to live up to some of the 


for Internet Explorer. If you need to 


most visionary bubble- 
time hype. Whereas many 
people once dismissed 
Amazon as a mere book- 
seller and Google as just 
the latest search-engine 
market leader, we can now 
see that they are position- 
ing themselves as powerful 
e-commerce platforms and 
important providers of 
general-purpose technolo- 
gy services. 
Both Amazon and 
Google have made great 
progress toward becoming 
broad-based Internetwide resources 
that, like operating systems and data- 
bases before them, can be used to cre- 
ate new forms of value in an ever-ex- 
panding set of ways. They are even 
managing to give tangible meaning to 
the idea of Web services, something 
that Microsoft, IBM and other pure IT 
players have struggled to do. 
Why haven't established pre-Inter- 


net market leaders responded more ef- 


fectively? The answer should be clear 
to anyone familiar with IT industry 
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history. Today’s dot-com survivors are 
outperforming their established rivals 
for the same reasons that many ven- 
ture-capital-backed IT start-ups have 
surpassed established IT suppliers. 
The younger companies tend to be 
faster, more focused and more motivat- 
ed, resulting in more responsive orga- 
nizations not bogged down by history. 
In other words, established pre-Inter- 
net businesses are having the same 
problems dealing with newcomers that 
mainframe, minicomputer and work- 
station vendors once did. 

The bottom line is that there was al- 
ways a lot more substance to the dot- 
com boom than many of us now seem 
to remember. While the many financial 
excesses of the late 1990s certainly 
needed a major correction, the ideas 

that created the bubble have lived on. 

A decade from now, much of the 
promise of the dot-com revolution will 


be fulfilled. @ 44138 


WANT OUR _— 


Deloitte (all of which bid on the 


Net Tax a Bad Idea 


EGARDING JACK VINSON’S 

letter of Dec. 15 [QuickLink 
43384]: Brick-and-mortar mer- 
chants in most states collect and 
remit only one tax rate, not 7,500 
Then the state revenue department 
distributes the money to the state 
county and city. A sales tax on the 
Internet would put most merchants 
out of business, but maybe that is 
what Mr. Vinson has in mind 
James P. Cox 
Varna, Ill. 


Windows Server's 


Unnecessary Bloat 


HAT AN EXCELLENT article 

on the newest update of the 
Windows Server series [“Windows 
Server 2003: Raising Shields,” 
QuickLink 42985]. | have always 
wondered why a server would in- 
clude Outlook Express, Media 
Player and Remote Assistance. 

| have installed an evaluation 

version over one of my test Win- 
dows 2000 Advanced servers and 
was pleased at the ease of doing 
that, but disappointed when | im- 
mediately needed to apply several 
critical patches, especially the one 


grab updates, it seems something 
thinner and much less vulnerable 
than Internet Explorer should be 
ncluded 

Thomas K. Edgar 


Distance learning technolo- 


gist, U.S. Department of 


Defense, Stuttgart, Germany, 


tedgar@techie.com 


A Real Hard Crash 


HEN MY 40GB HARD DRIVE 
died, | wasn't bothered 
nuch, because it was just left over 
from the original system when | 
made a 120GB drive my primary 
So! took all the screws out of it and 
opened it up. There was a nice, 
shiny disk and the supersharp 
read/write heads. | couldn't get the 
bolts off to remove the platter, so | 
just reached in with the pliers to 
bend it out. Bam! Crash! Tinkle! 
The sucker was made of glass, not 
metal, and shattered into about | 
100 pieces. OK, NSA, try putting | 
that together after you findit inthe | 
landfill [“Dawn of the Undead 
Data,” QuickLink 43381). 
Chuck Peterka | 
Exton, Pa., | 
clpeterka@aol.com | 


Not All Academic 


HE EXPERIENCE of the IT com- 

munity here in Jacksonville di- 
verges from the findings of Boston 
University researcher Nitin Joglekar 
[“Sidebar: Researcher Says Off- 
shore Moves Don't Lead to Big U.S 
Job Losses,” QuickLink 43688] 
Ever since Bank of America, Merrill 
Lynch and Prudential chose to send 
work to India, the local program- 
ming market has severely tight 
ened. This began in early 2001 and 
has continued. The only factor that 
seems to drive the offshoring is 
pure greed and shortsightedness 
by CEOs 
Jeff Schwandt 
Senior developer, 
Jacksonville, Fla. 


Either Way, No Jobs 


CCORDING TO THE ARTICLE 

“Another State Looks Off- 
shore” [QuickLink 43685], the 
Washington State Health Care Au- 


| thority awarded the contract for an 


IT project to Healthaxis Inc., an Irv- 
ing, Texas, company that has been 
working with an India-based out- 
sourcer. To be fair to both sides, | 
wonder how PeopleSoft, Oracle or 


) would have approached it 
Is it certain they would have used 
cal IT workers? Chances are they 
overseas. The 
outcome would be the same: n 
jobs for the local IT talent 
he only way 


se people 


shore companies. Similar! 
federal governmer it 


SU sptable 


Srinivas B. Raju 
Dallas 


COMPUTERWORLD wolcumes 
comments from it 
will be edited for brevity a 

They should be addressed 
Computerworld, PO Box 9171, 500 
Old Connecticut Path, Framingham, 
Mass. 01701. Fax: (508) 879-4843 
E-mail: letters@computerworld.com 
Include an address and phone num- 
ber for imm: rediate verification 


readers. Le 


e For more letters on these and 
other topics, go to 


www.computerworld.com/letters 








2:01AM CHECKINTO HOTEL 2:11AM 
CHECK INTO INTERNET 2:26AM 
WORM ENTERS ROOM 536 2:28AM 
WORM EVACUATED BY NETWORK 
2:32 AM ORDER GRILLED CHEESE 
AND FRIES 2:35AM DOZE OFF 


Your mobile workforce. An army of productivity or multiple points of entry ripe for intruders? Enter the self-defending network, with integrated security woven throughout. A line of 
defense that delivers security where security is needed. Wherever you do business. Inside the intranet. Outside the intranet. Across the Internet. Even in hotel rooms on the other 
side of the planet. So your jet-lagged mobile workers stay safe and secure. And your business keeps marching forward. To learn more about how Cisco can help pian, design and manage 
your network security, visit cisco.com/securitynow. SELF-DEFENDING NETWORKS PROTECT AGAINST HUMAN NATURE. 


Cisco SYSTEMS 


THIS IS THE POWER OF THE NETWORK. NOW. 
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A NETWORK OUTAGE THREATENS 
TO SHUT DOWN GLOBAL DISTRIBUTION. 


a 
HOURS TO FIND 


CAN YOUR SOFTWARE KEEP BUSINESS FROM DISAPPEARING? 


Business Service Management solutions from And protect the delivery of vital business services 
BMC Software® can. In fact, they let you predict like sales, customer service, online transactions, 
critical performance problems and resolve them logistics and distribution —whatever is most 
before they ever impact your business. And you critical"to your company’s success. It’s enterprise 
can prioritize IT management, investments and management software that works with your existing 
resource allocations to optimize your business IT resources to let you manage what matters from 
performance. So you can solidly align your IT a business perspective and execute with precision. 
investments with strategic business goals. Find out how at www.bmc.com/bsm51 
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Q&A 


Managing Data Centers 
Through 

Tim Howes, CTO at data center 
automation vendor Opsware Inc., 
explains how the emerging Data 
Center Markup Language could 
benefit IT managers. Page 30 


ACOB CROSSMAN, a software engineer at Soar 
Technology Inc. in Ann Arbor, Mich., uses 
blogging tools from Palo Alto, Calif.-based 
Socialtext Inc. to keep an up-to-date engi- 
neering notebook on his ideas about a partic- 
ular project that can be accessed by other 
project participants. 
“One of the disadvantages of a paper-based engi- 
neering notebook is that it’s hard to find things un- 
less you want to go through it manually,” Crossman 


FUTURE WATCH 
Printer Magic 


Printable parts to fix PCs, 
TVs and maybe even the 
family car — your next 
parts order could someday 
be delivered through an 
ink-jet printer. Page 31 


says. “So I decided to use the blog feature of Social- 
text’s software to keep track of my ideas. I would 
type them in, and then they’re immediately search- 
able using another feature of the software.” He is also 
able to link to other documents about the project us- 
ing the blog entry. 

Crossman is not alone. Recently, weblogs, or blogs, 
which let anyone with a Web browser and some 
easy-to-use software publish a personalized diary on- 
line, have started to emerge as valuable knowledge 


BLOGS 


BUSINESS 


Weblogs began as a personal 


communications medium, but 


they're moving into corpora- 


tions as tools for collaboration 


and knowledge management. 


BY LINDA ROSENCRANCE 


OL.26.04 


SECURITY MANAGER'S JOURNAL 
Stepping Up to Sarbanes-Oxley 


As his company accelerates its efforts 
to comply with the Sarbanes-Oxley 
regulations, Mathias Thurman must 
read between the lines to ensure that 
the IT security group’s responsibil- 
ities are covered. Page 32 


management and communication tools in companies. 

But blogs aren’t entering through the CIO’s office. 
They often first appear in companies as the conve- 
nient records of engineering or design projects. 
They’re taking the same bottom-up adoption path 
followed by instant messaging, another collaboration 
tool originally used for personal communication. 

Weblog software, whether free, inexpensive or not 
so cheap, aggregates and publishes unstructured 
content on the Web by time and topic. XML can be 
used to embed links in the blog from a variety of re- 
sources, but no knowledge of that language or HTML 
is necessary. 

The details and features of the technology vary by 
vendor, but blogging software is basically a simple 
content management system that’s designed to take 
content written by the blogger and post it at the top 
of a page. 

That content is either stored in a database or a flat 
file, depending on the software. Usually the presen- 
tation layer is separate from the content, so that the 
blogger can design the look and feel of the blog and 
simply fit the content elements within whatever for- 
mat the user wants to read. Many blogging systems 
provide templates to make that easier. 

Using blogs, companies can easily and quickly 
communicate information such as project updates, 
research, and product and industry news both inside 
and outside the business. Security issues are the 
same as with any Internet-based application. 

Even though blogging technology has the potential 
to become important to their companies, most CIOs 
haven't paid much attention to blogging, and it’s not 
one of the tools they’re considering to solve their 
myriad IT problems, according to John Patrick, presi- 
dent of Attitude LLC in Ridgefield, Conn., and for- 
mer vice president of Internet technology at IBM. 

“I believe it is important to the CIO and the enter- 
prise, because blogging introduces a new way to cre- 
ate, share and leverage knowledge in the enterprise,” 
Patrick says. 

But Jamie Lewis, an analyst at Burton Group in 
Midvale, Utah, says he isn’t sure all companies 
should immediately jump on the blogging bandwag- 
on. “Whether companies should look into using it 
depends on corporate culture and the kind of culture 
they’re trying to develop,” Lewis says. 

Blogging is like a lot of other collaborative tools — 
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if the company is good about trying to encourage and 
generate cross-functional and interpersonal collabo- 
ration and communication, then it’s a good idea, 
Lewis says. 

Internally, some corporations are using Web tools 
like Six Apart Ltd.’s Movable Type to create project 
management blogs, says Anil Dash, vice president of 
business development at Six Apart, a weblog soft- 
ware vendor in San Mateo, Calif. 

“You can do things like start one weblog for each 
project and have it run its course,” Dash says. “As the 
project continues along, everybody can do status up- 
dates and be able to link to every other relevant re- 
source, whether it’s on the Web or in a Word docu- 
ment or in a proprietary company database. So for 
internal use, you have a lot of flexibility, and it re- 
spects the firewalls and the other boundaries you've 
already put in place.” 

Michael Masnick, president of Techdirt Inc. in Fos- 
ter City, Calif., says that while most corporations 
have knowledge management tools and corporate 
portals to organize internal data, they don’t have an 
effective way to deal with external information. A 
blog allows users to integrate internal and external 
information. 

Enterprise blogs provide companies with easy-to- 
use tools to manage external information, which is 
extremely critical because it affects relationships 
with customers, partners and investors, as well as in- 
ternal decision-makers. 

“Having an enterprise blog provides a strategic ad- 





vantage over the competition and helps companies 
gain market share and respond faster to their rapidly 
changing business environments,” Masnick says. 

The U.S. Department of Defense’s Naval Undersea 
Warfare Center (NUWC) in Newport, R.L, is using 
TeamPage enterprise blogging software from Provi- 
dence, R.I.-based Traction Software Inc. to create a 
secure communications hub for a project to evaluate 
night-vision technology. 

The blog is part of a pilot project to speed up com- 
munications within the DOD’s test and evaluation 
programs. NUWC will use it to ensure that informa- 
tion about its testing of the night-vision technology 
will be available in real time to its partners, including 
Ford Motor Co. and the U.S. Army’s night-vision lab, 
according to Tammi McVay, program analyst project 
lead at NUWC. 

“[Some of our partners] will test this night-vision 
technology under various circumstances and log 
their test results and any observations that they have 
on our weblog, and all our other partners will have 
immediate access to it,” McVay says. “We’re working 
with all unclassified data for this go-round, but we’d 
need to look at this further to see how it would work 
in the world of classified information.” 

After the four-month pilot is over, the DOD will 
analyze NUWC'’s results and determine whether 
blogging has a future in the agency, says McVay. 

Traction President Greg Lloyd says enterprises 
can use weblogs in a number of ways. 

“We focus on groups within the company where 
communication either within the company or with 
channel parties or customers, or both, is part of their 
main business activity,” he says. “What the weblog 
provides is a very simple way to collect, organize and 
disseminate information that works and acts like a 
Web newspaper.” 


Keeping Up to Date 
Weblogs give people a self-service way to find out 
what’s happening within the company, Lloyd says. 

“With our software, you can add comments or 
questions on any paragraph you see,” he says. “So if 
someone in the sales organization sees something 
that a competitor has just announced, that salesper- 
son can add a note under the paragraph that talks 
about the new product announcement and make it 
visible to members in the sales team or only visible 
to the people in the competitive intelligence group, 
who would then correlate it and send it throughout 
the organization.” 

Many corporations aren’t aware of the substantial 
business potential of enterprise blogs, says Toronto- 
based author Jim Carroll, who has written about 
business weblogs. 

“If ’'m a customer and I’m dealing with a product 
that has some type of well-known problem, to be 
able to access a blog and track that blog and to be 
able to track historic postings on that blog — I think 
that would be useful,” Carroll says. “The example I 
use is Harley-Davidson building a blog for its cus- 
tomers to keep up to date on all the cool stuff that’s 
happening with Harley, because people are religious 
about their Harleys. But I don’t think the marketing 
world has figured it out yet.” 

One of the reasons the upper management at most 
corporations hasn’t really warmed up to the enter- 





Why a Business Blog? 


Here are some of the ways weblogs 
can benefit a company: 
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and make it relevant to their audiences in an easy-to- 
read format. Enterprise users can scan a customized 
blog and feel confident that they have a good sense of 
what’s happening on their project, in their company 
or in their industry. 


They provide a central repository: Blogs put informa- 
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groups of users. Information is archived in a search- 
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information from a previous month or wants to aggre- 
gate all information available about a particular com- 
pany or trend. 


They create a knowledge community: Blogs let groups 
share, discuss, annotate and amend content. This in- 
teractive component highlights the value of the infor- 
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prise blog as a marketing tool is the end of the '90s 
high-tech boom, Carroll says. 

“I think people got excited about the Net. They got 
excited about it as a marketing tool and a customer- 
support tool — as a tool by which they could inno- 
vate their business processes. And then everything 
went wrong, and everyone out there is too darned 
terrified to try anything new right now,” he says. 

But at lower levels of business, the convenience 
and usefulness of blogs is more powerful for users 
than techno-skittishness. 

“The trend that’s happening now is that users are 
seeing the need for blogging like they have with oth- 
er disruptive technologies, and they’re bringing them 
into the enterprise at the workgroup or departmental 
level,” says Ross Mayfield, CEO of Socialtext. 

Mayfield says the adoption scenario begins when 
a single worker sets up a work space for his work- 
group. The group then goes on to build a business 
case for how blogging is adding value just on that 
small scale. 

“Then that person creates a work space with 
somebody who’s in a different workgroup, and grad- 
ually what ends up happening is you gain this critical 
mass of building business case after business case 
within an organization,” he says. “And by the time the 
CIO is really looking at the technology to make a 
top-down buying decision for the enterprise, they al- 
ready have an existing class of business cases and 
proven techniques of how users are adopting it.” 

Mayfield says because these blogging tools are in- 
expensive — approximately $30 per user per month 
— easy to use and accessible, there’s the potential for 
growth within the enterprise similar to the growth of 
instant messaging. 

“I would expect it to be the same way, where users 
are just going to have it first, and then managers are 
going to realize increasingly the value of it as a man- 
agement tool,” Mayfield says. @ 43761 
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A CIO Insight survey of IT execs revealed this startling news: 42% of the execs polled spent an average of 29 cents out 
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Disposable |T 


DRIVES CAMPAIGNS 


The 2004 primary campaigns 
demand fast and easy IT 
systems that deliver results 
like there's no tomorrow. 


BY MARK HALL 


NE OF THE most 

"> striking aspects of 
‘ § this year’s presiden- 

# tial primary race is 

= the sudden impor- 
tance given to candidates’ IT 
operations. Everything from 
elaborate Web sites and ag- 
gressive online fundraising to 
e-mail campaigns and blogs 
have been embraced by virtu- 
ally all of the candidates run- 
ning for president. 

And yet while IT profes- 
sionals might assume that 
getting a campaign’s IT opera- 
tions up and running is a com- 
plex and time-consuming 
affair, what’s most striking 
about these IT infrastructures 
is how quickly they’re cobbled 
together — and then discard- 
ed. For better or worse, cam- 
paigns live in a world of dis- 
posable rT, 

“Everything you use didn’t 
exist a year ago,” says Mike 
Liddell, director of Internet 
strategy for the Joe Lieberman 
for President campaign in 
Arlington, Va. “And what 
you've created was done ina 
short amount of time and has 
a short life cycle.” 

That means concerns about 
integrating with back-end 
systems or anticipating the 
long-term effects of choosing 
between an open-source tech- 
nology or a proprietary ap- 
proach just don’t matter, since 
the life cycle of a presidential 
campaign is so short. 

Unlike most businesses, 


| 


campaigns have a termination 
point, says Sean Kewley, vice 
president of Voter Solutions 
Inc., a Chicago-based supplier 
of database and voter analytic 
software. That’s why they 
don’t invest in an IT infra- 
structure loaded with network 
switches or high-performance 
servers. “Why would you, 
when you know that the orga- 
nization is going to dissolve 
on election day?” he asks. 

But if the IT organizations 
are more nimble than their 
corporate counterparts, they’re 


PAPERING OVER E-VOTING PROBLEMS 


Jan Soulé, vice president of 
marketing at Campaign Super- 
store in San Jose, says she 
thinks presidential campaigns 
are far behind on current tech- 
nology “because they only 
look at it every four years.” 

Her company offers Web 
site templates for candidates 
running for office, including 
Rep. Jim Gibbons (R-Nev.). 
With them, Soulé says, a can- 
didate can get a professional- 
looking site for about $1,000 
— areasonable amount to 





spend on a system that will 
simply be cast aside at the end 
of the election cycle. 


Time to Market 


Nicco Mele, webmaster at the 
Dean for America headquar- 


| ters in Burlington, Vt., says he 


agrees that long-term IT 


thinking is detrimental to a 
| political campaign. “What 


matters is how fast. It’s a time- 
to-market environment,” he 
says. So, like many corpora- 


| tions today, campaign IT orga- 


nizations turn to outsourcing. 
For example, Howard 
Dean’s campaign makes heavy 
use of streaming video on its 
Web site but never gave a 


| thought to developing any in- 
| frastructure for it in-house. 


Instead, the campaign relies 
on streaming media service 


| provider Wavexpress Inc. in 


New York. 


Throwaway IT operations 


| also affect the kinds of people 


hired or accepted as volun- 


| teers inside a candidate’s IT 
not necessarily more advanced. | 
| ly get people who have similar 


organization. It’s vital to quick- 


skill sets because there’s no 
time to train anyone. 

The Lieberman campaign 
uses an all-Microsoft technol- 


| ogy strategy, from Internet In- 


formation Server on the Web 


| tier to Exchange for messaging 
| and SQL Server for databases, 
| because most potential IT 


staffers are familiar with those 
products, Liddell says. 
For Dean’s IT troops, how- 


ever, adopting popular open- 


| source technologies is the way 





to go. His campaign’s Web in- 
frastructure includes Red Hat 
Linux, Apache Web servers 
and Bricolage, an open-source 
Web content management 
tool from Kineticode Inc. in 
San Francisco. 


Short-term Thinking 
It’s doubtful that politicians 
will change their attitudes 
about IT as a transient re- 
source and think beyond 
their current campaigns. In 
many cases, the IT infrastruc- 
tures and even the data are 
discarded. 

Michael Badnarik is trying 
to get the nod as the presiden- 
tial candidate for the Libertar- 
ian party and spent more than 
30 years as an IT developer 


| and consultant. He says the 


discarding of data reflects the 
time-critical nature of most 
voter information. “That’s 
essentially the problem: It 
drops to zero after the elec- 
tion,” he says. 

For all the drawbacks, how- 
ever, a disposable IT strategy 


| that gets results quickly could 


transfer well to some corpo- 
rate projects with short-term 
needs, such as on-site audits 


| and targeted marketing ef- 
forts, say campaign workers. 


And the approach of cam- 


paign IT organizations mir- 


rors that of at least one type of 
business: companies that 


| emerged during the dot-com 


boom, when time to market 
was everything. “It’s like 


| working in a start-up,” Liddell 


says. @ 44011 


THE POLITICALLY PARANOID got even more 
nervous last year when researchers at Johns Hop- 
kins University analyzed the code inside AccuVote- 


TS machines built by Diebold Inc. and found it 
flawed, 


Avi Rubin, technical director for the Johns Hop- 


kins’ Information Security Institute in Baltimore, 


which evaluated the Diebold source code, says the 
company's developers used Data Encryption Stan- 
dard, an outdated encryption technology, and “then 


they used it wrongly.” 
His team’s research claims that smart cards 
used by voters to access the machines can be 


counterfeited, letting voters “cast multiple ballots 
without leaving any trace.” Furthermore, security 
was lax enough to permit precinct workers to fiddle 


with the machines’ vote tallies. 


Rubin adds that the systems are also vulnerable 
when they communicate to “home base, both to 
fetch election configuration information and to re- 
port final election results.” According to the re- 
search, Diebold’s technology “[does] not use cryp- 
tographic techniques to authenticate the remote 
end of the connection nor do they check the integri- 
ty of the data in transit.” 

North Canton, Ohio-based Diebold has attacked 
the report as “inaccurate” and suggested that Rubin 
is biased because he consulted with a Diebold 
competitor. A Diebold spokesman also says that the 
researchers ignored local election certification 
processes that help secure the systems. 

But Douglas Jones, a professor who studies 
election technology at the University of lowa in 
lowa City, says those processes are neither rigor- 


ous nor well enforced, especially when it comes to 
certifying technology. 

He points to a study of Diebold systems in Cali- 
fornia that found that every county that used the 
systems ignored the proper procedures for certify- 
ing and registering the machines. 

Both Rubin and Jones say the best way to en- 
sure secure and accurate automated voting is with a 
paper audit trail. Indeed, some states have moved 
to provide election officials with a printed ballot for 
audit purposes. Yoters could check the paper ballot 
by viewing it through a glass window. 

Anne Martens, chief of communications for the 
Oregon secretary of state, who oversees elections, 
agrees. “Having a paper trail increases voter confi- 
dence,” she says. 

: te ~ Mark Hall 
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A BETTER DBMS 


For your next generation of applications, move 
to the next generation of database technology. 

Caché is the post-relational database that com- 
bines high-performance SQL for faster queries and 
an advanced object database for rapidly storing 
and accessing objects. With Caché, no mapping 
is required between object and relational views of 
data. That means huge savings in both development 
and processing time. 

Applications built on Caché are massively scala- 
ble and lightning-fast. Plus, they require minimal or 
no database administration. 

More than just a database system, Caché incor- 
porates a powerful Web application development 


environment that dramatically reduces the time to 
build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at thousands of the world’s 
largest hospitals. Caché is so reliable, it’s the leading 
database in healthcare — and it powers enterprise appli- 
cations in financial services, government and many 
other sectors. 

We are InterSystems, a specialist in data manage- 
ment technology for twenty-five years. We provide 
24x7 support to four million users in 88 countries. 
Caché is available for Windows, OpenVMS, Linux and 
major UNIX platforms — and it is deployed on systems 
ranging from two to over 10,000 simultaneous users. 


InterSystems & 


EL. CACHE 


Make Applications Faster 


Try a better database. For free. 


Download a free, fully-functional, non-expiring version of Caché or request it on CD at www.InterSystems.com/robust 
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LAST FALL, some 40 man- 
agement tool vendors 
formed the DCML Orga- 
nization, a consortium 
committed to developing 
an open standard to facil- 
itate interoperability and 
‘ rae better integration between 
Se. ential tools. Vendors say the the 
evolving Data Center Markup Lan- 
guage will be critical to the develop- 
ment of utility computing and simplify 
life for data center managers. The first 
release of DCML is scheduled this 
quarter, with products adapted to the 
specification expected by midyear. 

One of the leaders of the effort is Tim 
Howes, chief technology officer at Ops- 
ware Inc., a data center software au- 
tomation vendor in Sunnyvale, Calif. 
He discussed the motivations for devel- 
oping DCML and its technical chal- 
lenges and potential user benefits with 
reporter Patrick Thibodeau. 


What problem is the DCML Organization 
trying to solve? Over the past five to 
eight years, there has been a tremen- 
dous explosion of complexity in the 
data center. The problem is that the 
traditional management tools haven't 
kept up with that explosion. You have 
something doing monitoring, for in- 
stance, that needs to communicate 
with something doing provisioning. 
Think back 10 years ago. There 
were relatively few servers in the data 
center. Those servers were relatively 
large, and they were running a rela- 
tively small number of applications, 
maybe in the dozens. Today, there are 
literally thousands of servers in data 
centers, as well as hundreds or thou- 
sands of applications running across 
those servers. The complexity of man- 
aging that has just gotten out of hand. 


Where are existing management tools falling 
short? It’s not so much that they are 
falling short. The problem is that no 
one company writes data center man- 
agement software that solves the en- 
tire problem. Even if there were such 
a company, would you really want to 
put all your eggs in that basket? 


Where does DCML fit in? There’s a 
need to have all these management 
products communicate with one 
another, and that’s what DCML is 
about — providing a common data 
format for exchanging information 
about the environment being man- 
aged between all of these different 
management systems. 


Can you give an example of how that would 


TECHNOLOGY 


MANAGING 
DATA CENTERS 


work? When you provision a new ma- 
chine, you want to make sure that ma- 
chine is monitored, so you need to 
communicate to your monitoring sys- 
tem that there’s a new machine to be 
monitored. Today that happens, if you 
are lucky, by somebody leaving a 
Post-it note on the monitor of the guy 
who runs the monitoring 
system. But DCML allows 
that to happen in a more 
automated fashion. Simi- 
larly, that happens with 
security systems, backup 
systems — there are all 
kinds of different systems. 
DCML provides the vo- 
cabulary, the language if 
you will, for those sys- 
tems to communicate 
with each other. 
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How long is the list of applica- 
tions and systems potentially 
affected by DCML? The list 
is ultimately as long as the 
variety in the data center 
— any system that you are 
using to manage your en- 
vironment. We’re focused 
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on the data center because that’s 
where we think the most complexity 
is, but the complexity actually ex- 
tends beyond the data center to other 
environments as well, and there’s 
nothing to prevent you from applying 
DCML to those environments. 


What are the initial goals for 
DCML? We're trying to 
create a standard data for- 
mat that can be used to 
exchange information be- 
tween automation and 
utility computing systems 
and traditional manage- 
ment systems. The use 
cases that we have in 
mind are: making sure 
provisioning systems can 
communicate with the 
systems that manage the 
machines that they provi- 
sion; making sure those 
systems can communicate 
with the asset-tracking, 
inventory and billing sys- 
tems that are responsible 
for keeping track of 





what’s going on in the en- 
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vironment; and translating that into 
billing for customers or cost account- 
ing for internal purposes. We want all 
these things to be able to communi- 
cate with one another. 


What technical challenges do you face? 
The biggest technical challenge is be- 
ing able to deal with the level of di- 
versity that’s out there. Another tech- 
nical challenge is to define DCML 

in such a way that it can be adopted 
incrementally so that neither vendors 
nor customers have to radically 
change their products or how those 
products are used. 


What kind of information must be ex- 
changed, and in what format? The format 
is XML-based. The information really 
falls into three categories. The first is 
the physical components themselves 
— the environmental information, 
such as characteristics of the server 
and networking gear. The second 
type of information, called the library, 
is the best practices and policies that 
you want. Finally, there is the blue- 
print, which shows how to combine 
those physical components in with 
the best practices that you specified 
in the library to produce an actual 
environment. DCML is not going to 
mandate the best practices. Instead, 

it will provide the mechanism to 
express best practices that would be 
different from one IT department to 
another. 


The big chailenge in writing standards is 
often political - balancing competing ven- 
dors’ agendas. Is that true here? It’s al- 
ways a bit of a challenge. We've got 
an opportunity to decide whether we 
want to make a standard that’s very 
useful on the ground and works or 
that satisfies the political winds of 
different players. Historically, the 
standards that are successful are the 
ones that stay focused on implemen- 
tation and adoption. Success to me is 
not how many [vendors] sign up and 
say they are going to support the 
standard. Success is how many get it 
into their working code and then how 
many customers end up using it. 


Some big vendors, including Sun, HP and 
IBM, aren’t involved with DCML. Can you 
succeed without their participation? It’s 
not at all surprising to me. The big 
companies are invested in their own 
proprietary technologies, and they 
often don’t see it in their interest to 
migrate to an open standard until or 
unless their customers force them to 
do so. @ 43764 
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Coming: 3-D 
electronic parts 


from your ink-jet 
printer. By Todd 


R. Weiss 


| 
cee acces 


FUTURE 
— 


OU’RE DRIVING across Iowa 
on a steamy, sunny Fourth of 
July weekend when the car 
dies and coasts to the side of 
the road, the victim of an electronic 
part gone bad inside the alternator. 
Luckily, there’s a 24-hour repair shop 
in Iowa City where they can “print” 
you a new circuit board on the spot 
using a specially equipped printer that 
sprays out layers of inklike polymers, 
with all the electronic connections and 


transistors laid out in the proper arrays. 


A mechanic installs the part, and 
you're back on your way with a re- 
paired alternator. 

A wild dream? Not necessarily. 

Today, scientists at universi- 
ties and companies are work- 
ing on just such technologies, 
where specialized commercial 
ink-jet printers can be used to 
create 3-D parts using process- 
es that spray liquid plastics, one layer 
stacked atop another, to build up a 
component. 

So far, researchers are able to create 
small transistors using 3-D printing 
methods, while specialized industries 
already exist that can print prototype, 
one-off parts. 

But while experimental transistors 
and prototype parts are being created 
separately today in labs, the technol- 
ogy still isn’t here for printers to build 





electrical circuits integrated into com- 
pleted, working parts. 

That technological jump could 
come in five or more years, says John 
Fitch, a mechanical engineer at Palo 
Alto Research Center (PARC) in Cali- 
fornia. “That’s a vision I’m sure some 
people are trying out right now,” he 
says. Eventually, technology that al- 
lows devices to print out 3-D parts 
with integral electrical capabilities 
could have limitless uses, replacing 
expensive silicon-based electrical 
components with parts made from 
cheap plastics. 

The technical challenges are still 
large, however, including the potential 
need for many different kinds of mate- 
rials to be printed, from plastics to 
steel to aluminum or even carbon 
fiber. “It means that everybody would 
have to have a printer that has lots of 
different cartridges or lots of different 
printers,” Fitch says. “The chemistry of 
that is pretty complicated.” 

Rather than ending up as consumer 
items, such printers could ignite an in- 
dustry in photocopying shops or other 
businesses where users could send a 
parts order by e-mail and pick it up or 
have it shipped to them, he says. 


Smart ‘Paper,’ Labels 


Plastic Logic Ltd. in Cambridge, Eng- 
land, which today creates ink-jet-print- 
ed plastic transistors to make active- 
matrix backplanes for flat-panel dis- 
plays, foresees a host of new markets 
for the technology. 

“Absolutely we see the large markets 
in things other than in prototyping,” 
says spokesman Cranch Lamble. 

“We've got a road map to work on 
two things,” he says. They are “elec- 
tronic paper” video displays — thin, 
flexible display devices — and flexible, 
plastic “smart labels” that could be 
used on consumer products. Such la- 
bels would contain electronic circuitry | 
that could trigger warnings to notify 
consumers when food in a package is 
no longer fresh or could include a dis- | 





My kids would 

love a Lego 
printer [to create | 
customized Lego 
building blocks 
for their construc- 
tion projects]. 
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posable timer on a container of hair 
dye to let the user know it’s time to 
wash the dye out. 

The actual creation, though, of re- 
placement parts on demand will take 
much more engineering, he says. “I see 
that as a very long-term vision of the 
technology,” Lamble says. “We want to 
enable others to think about what can 
be done with these devices.” 

Printable parts are also being worked 
on today by researchers at the Univer- 
sity of California, Berkeley, where flexi- 
ble, one-piece 3-D devices are being 
manufactured using ink-jet printers 
that build parts one layer at a time. 

These experimental, proof-of-con- 
cept devices, some of which look like 
miniature ladders, can be stretched or 
compressed to enable motion, but they 
don’t require any assembly. Called 
flexonics, or “printable flexture-based 
mechatronics,” the structures are be- 
ing developed with the possibility of 
someday adding gears and shafts and 
other mechanical components, as well 
as capacitors to store electricity, says 
Jeremy Risner, a UC Berkeley graduate 
bioengineering student who is working 
on the project with John Canny, a pro- 
fessor of electrical engineering and 
computer science. 

“You can certainly imagine you 
could print out a whole drive train, if 
you can get the clearances,” says Ris- 
ner. “We want to print out functional 
devices.” 

Printing movable parts would be far 
harder then printing static compo- 
nents, of course. The idea of building 
printers that can churn out parts from 
various materials would be key to mak- 
ing it work, Risner says. “Ten different 
materials, even if they're 10 different 
plastics, is really cool to think about 
now,” he says. “I think it’s far-fetched 
now, but ... [maybe] it’s something 
that would be feasible.” 

Ultimately, there could be special- 
ized consumer products made by ink- 
jet printing technology, says PARC’s 
Fitch. “My kids would love a Lego 
printer” to create customized Lego 
building blocks for their construction 
projects, even including electrical ca- 
pabilities in the blocks to have them 
operate robotically, he says. “There 
may be some markets where it’s actual- 
ly big enough” to be a commercial suc- 


cess, he adds. @ 43994 
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When it comes to compliance, some aspects 
of meeting the law’s requirements may fall to 
the IT security group. By Mathias Thurman 


OST information se- | 
curity professionals | 
are probably familiar 
with at least one of 

the many recent regulations 

that have an information secu- 
rity element to them. For my 
company, the legislation of 
concern is the Sarbanes-Oxley 

Act, which has presented new 

financial accounting and re- 

porting requirements. 
I recently reviewed 
the law to see what 


the IT security group SECURITY 
MANAGER'S 
JOURNAL & 


ument I’ve read in | 
| tion security. 


needed to do to en- 
sure compliance. It 
was without a doubt 
the most boring doc- 


months. 

Besides getting bored, I also | 
came away confused because 
it offered no guidance on the 
related information security 
issues. After further reading, I 
decided that the most impor- 
tant part for my group is Sec- 
tion 404, titled “Management 
Assessment of Internal Con- 
trols.” This section mandates 
that management attest to the 
effectiveness of our company’s 
“internal control” structure 
and procedures for financial 
reporting. Internal control is 
an extremely broad term, but I 
translated this section to mean | 
that the CEO will expect my 
group to have sufficient con- 
trols in place to ensure the 
confidentiality, integrity and 
availability of financial and 
other critical information. So I 
came up with an initial plan to 
ensure compliance. 

Over the past few years, I’ve 
put together a series of infor- 
mation security policies, stan- 
dards, procedures and guide- 
lines. Some of these docu- 
ments are published, others 


are available to those who ask, 
and others are just sitting in a 
shared folder on our network. 
I think we have enough in- 
frastructure in place to satisfy 
most expectations of our ex- 
ecutive staff and any auditor. 
But to make everyone’s lives 
easier, I decided to standard- 


| ize on a methodology for poli- 


cies and standards called ISO 
17799 — something many of 
my peers are also 
doing. The ISO in- 
formation security 
code of practice 
consists of a frame- 
work that provides 
guidance in creat- 
ing strong informa- 


The ISO framework consists 


| of 10 main sections, with sev- 


eral subsections within each. 
First I created a table of con- 
tents, making sure that the ex- 
pected ISO 17799-compliant 


| headings were in place and 


that there was a place for 


| every policy, standard and 
| guideline that we have created 


over the past few years. Most 
of our documentation exists 


| as either Microsoft Word or 


Adobe Acrobat files. Eventual- 


| ly I'd like to convert all of the 


Sarbanes-Oxley 
mandates that audit 
reports contain a 
description of internal 
controls testing. . . . 
That presents a 
problem. 


“6 


xley 





to 


documents to HTML and cre- 
ate a hyperlinked set of docu- 
ments where users can quickly 
navigate from a policy to the 
corresponding standard, 
guideline and procedures. 
Even a well-organized set 
of documents doesn’t ensure 
compliance with those corpo- 
rate standards, however. Sar- 
banes-Oxley mandates that 
audit reports contain a de- 
scription of internal controls 
testing and that we document 
our system of internal control. 
That presents a problem. 


The Auditor Issue 
We used to have an audit per- 
son in the information securi- 
ty department, but after he re- 
signed, we never replaced him. 
At the time we couldn't find 
a qualified candidate. Then, 
eventually we lost the requisi- 
tion for that position, and the 
work he had been doing fell by 
the wayside. We do have a sep- 
arate audit department, but it 
mainly focuses on financial 
matters, not IT security. 

From my perspective, the 
important aspect of compli- 
ance is ensuring that the poli- 


| cies and standards we have 


created are followed and that 
we have a program to ensure 
that all departments are com- 
plying with the appropriate 
standards. This means that we 
have to take the time to revisit 
the standards we created to 
make sure they’re up to date. 

We started this work by 
scheduling meetings with 
each department in order to 
review documentation and en- 
sure that it is current and be- 
ing followed. We also looked 
at some of the work the previ- 
ous IT security auditor had 
completed. Along the way we 
found an Access database that 
lets us enter audit items and 
track compliance and areas of 
concern. 

Fortunately, there has been 





an extension to the Sarbanes- 
Oxley compliance date, and 
that should give us the time 
we need to satisfy these audit 
requirements. 


Goals for 2004 

While the Sarbanes-Oxley ef- 
fort will consume much of my 
team’s time for the next few 
months, I have a few other 
high-level initiatives in store 
for my group this year. 

The first will be an identity 
management system that in- 
cludes public-key infrastruc- 
ture technology. The chal- 
lenge will be identifying all of 
the applications that the iden- 
tity management system will 
touch and ensuring that we 


make the right decision on 


which vendor’s PKI system to 
use. Along the way we'll have 
to decide whether to install a 
certificate authority in-house 
or outsource that function. 
Finally, there is still a lack 
of compatibility between PKI 


vendor offerings and other 


products. It’s imperative that 
the system we pick be com- 
patible with all of our applica- 
tions and operating systems. 
After that’s completed, we 
will be looking for a new 
event-correlation tool. Our 
current product just isn’t per- 
forming as well as we'd like, so 
we will look at several other 
contenders. In addition, we 
will be looking to install a re- 
mote scanning system to con- 


| tinually scan our infrastructure 


for vulnerabilities. Finally, we 
will begin installing a configu- 
ration and patch management 


tool to address inconsistencies 
| within our environment. 


We want to ensure that both 
our critical servers and indi- 
vidual desktops have consis- 
tent configurations and are up 
to date on patches for each en- 
vironment. Those projects 
should keep us busy well into 


the new year. @ 43963 


WHAT DO YOU THINK? 


This week's journal is written by a real securi- 
ty manager, “Mathias Thurman,” whose 
name and employer have been disguised for 
obvious reasons. Contact him at mathias_ 
thurman@yahoo.com, or join the discussion 
in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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I've found the following Web 
sites helpful in understanding 
the IT security implications of 
the Sarbanes-Oxley Act: 

@ The PCAOB-Online’s Sar- 
banes-Oxley Web Site: 
www.sarbanes-oxley.com 

@ The American Institute of 
Certified Public Accountants’ 
Web site: www.aicpa.org/ 
sarbanes/index.asp 

@ The KnowledgeLeader Inter- 
nal Audit and Risk Manage- 
ment Community is a subscrip- 
tion-based site, but you can 
sign up for a 30-day trial to re- 


from hostile Java applets to 

steganography (communica- 
tions hidden in digital files). If 
you have been affected by the 
rash of recent worms or just 

want to enhance your breadth 
of knowledge, pick up a copy. 

- Mathias Thurman 


Skoudis and Zeltser have writ- 
ten a fantastic book that con- 
tains all the passion and cre- 
ativity Skoudis puts into his 
presentations for his SANS In- 
stitute courses. The book takes 
you on a tour of all the major 
forms of malicious code and 
many up-and-comers. 

With technical staffs as 
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AlterPoint Bundles 
Network Products 


AlterPoint Inc. in Austin last week 
announced its DeviceAuthority 
Suite, a bundling of three network 
configuration management prod- 
ucts: DeviceAuthority Audit Mod- 
ule, DeviceAuthority Update Mod- 
ule and DeviceAuthority Server. 
Integrated Network Environment, 
a new tool in the suite, provides 
real-time integration and feed- 
back. Pricing starts at $19,950 
for 100 devices. 


Veritas Broadens 
Linux Support 


Veritas Software Corp. in Moun- 
tain View, Calif., has expanded its 
support for Linux by including 
SUSE Linux and VMware. Veritas 
said it now has a full complement 
of enterprise storage, data pro- 
tection, high-availability and au- 
tomated provisioning software on 
SUSE Linux and Red Hat Linux. 


Red Hat Updates 
Linux 3 System 


Red Hat Inc. in Raleigh, N.C., an- 
nounced the first major update 
for its Enterprise Linux 3 operat- 
ing system, adding features for 
Red Hat Network support sub- 
scribers. Those include perfor- 
mance enhancements for AMD 
Athlon 64 CPUs; improved sup- 
port for IBM iSeries, pSeries, 
zSeries and S/390 systems; and 
support for new Intel Itanium 2- 
based systems. The updates are 
available free from Red Hat. 


NetScaler Offers 
New Switches 


NetScaler Inc. in Santa Clara, 
Calif., last week introduced the 
9900 Secure Application Gate- 
way and the 9950 Secure Appii- 
cation Switch. The devices are 
designed to optimize application 
performance and security in the 
Layer 4-7 traffic management 
market. The 9900 gateway sells 
for $55,000, and the 9950 
switch sells for $90,000. 
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Find a Successful 
Search Strategy 


EXT-SEARCH TECHNOLOGY is finally 
coming of age. Stand-alone search “solu- 
tions” can still be ludicrously bad: Mon- 
santo’s top 10 hits for “fertilizer” lead to 
boilerplate legal disclaimers, Boeing’s top 
10 hits for “jet fighter” feature discontinued aircraft, 
and Toyota’s top 10 hits for “Camry” are in Chinese. 
But when text search is integrated into a broader appli- 
cation framework, the story is much happier. Search is 


a clear success in several 
specific niches, such as on- 
line retailing or regulation- 
driven document manage- 
ment. And as the means im- 
prove of integrating text 
with other kinds of data, a 
much broader range of text- 
aware applications is becom- 
ing practical as well. 

Some of the more intrigu- 
ing opportunities include: 

Upgrading your Web presence. 

Surely you already have a 

search capability on your 

Web site. But it could probably be a lot 
better. 

Upgrading your online documentation. If you 
provide a lot of technical information 
online, it’s probably hard to navigate. 
Helping customers find what they need 
more easily can save both them and you 
a lot of money. Effective text search is 
crucial in this effort. 

Navigating applications more easily. Large 


e-commerce sites are often best navigated | 


via text queries such as “John Grisham” 
or “red turtleneck sweaters.” The same 
may be true for back-office systems such 
as merchandising or purchasing. 

Helping your people find one another. Suppose 


an employee searches for information on | 


a subject and finds vaguely relevant in- 
formation written by a colleague. There’s 
a good chance that talking with this per- 
son will help your employee find out 
what he needs to know. Not only is such 
expertise-finding invaluable in global en- 
gineering and consulting organizations, 


but it also can be helpful 
in figuring out how to ap- 
proach particularly tricky or 
important sales challenges. 
Digging into text mining. You 
probably have a wealth of 
text and even voice records 
pertaining to customer con- 
tacts — service call reports, 
call center reports, sales 


call reports, customer letters | 
| ally all a programmer needs. 


and e-mails, even recorded 
phone calls or chat sessions. 
Analyzing these could 

turn up crucial information 


| about customer segmentation or about 
product strengths, weaknesses and 


flaws. It’s a gamble, because you don’t 


| know how much you'll really find — but 


just like the original form of data mining, | : . : 
| are pretty far along in text/relational 


it’s a gamble worth taking. 
All of these application scenarios de- 


| pend on text being related to other kinds 
of data. In unaugmented text search, 
| documents are searched for words and 


phrases, which are then used to assess 
the subject of a document. However, lin- 


to use extra, nonlinguistic information, 
the Web search relevancy problem sim- 
ply couldn’t be solved. 

Google’s solution — looking at a 
page’s “link popularity” — isn’t applica- 
ble to most corporate search environ- 
ments. However, enterprises have access 


| to plenty of other extratextual informa- 





tion. Documents can be tagged by date, 
author, subject and, above all, intended 
audience and purpose. Customer com- 
munications can be associated with 
tremendous amounts of customer and 
product data. Most of this information is 
best stored and communicated via SQL, 


| Lightweight Directory Access Protocol 


(LDAP) or XML. 

The key point of integration between 
text and these other kinds of data is a 
full-featured database management sys- 
tem. IBM and Oracle both support 
“WHERE CONTAINS?” syntax, letting 
text searches and normal relational 
queries be joined in a single SQL state- 
ment. And since SQL systems these days 
can also talk XML and LDAP, those inte- 
grations are provided as well. Text- 
specific features are still missing from 


| application development tools, but that’s 


not crucial. Since relational database 


| management systems stuff an entire doc- 
| ument into a binary large object field, 


generic SQL building technology is usu- 


What’s trickier is integrated adminis- 


| tration of text and tabular data. Text 


search relies on specialized text indices, 


| which are huge, sparse and generally a 
| lot like bit maps. Integrating text (or bit 


map) indices into relational databases is 


| far from trivial. 


Fortunately, however, Oracle and IBM 


integration, with Oracle being somewhat 
ahead of IBM. Microsoft, which has long 
lagged behind, pledges to narrow the gap 


| soon. 


So should you incorporate text search 
in the applications you build or buy? For 


Sens ee ‘i | >t ante isec >» answer is ves. Tex 
| guistic techniques alone aren't enough to | most enterprises, the answer is yes. Text 


| produce satisfactory results. This is why 
| pre-Google search engines all failed; un- 
til Google came up with an effective way | 


| data is obviously pervasive and impor- 


tant. The cost of integrating text with 
other data types is manageable. Text- 
search boxes are a major form of user in- 
terface. If you don’t have a text strategy, 
you're probably not getting the most out 
of your IT opportunity. @ 44141 
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Closing the Deal 

GE Real Estate has automated 
most of the front-end processes on 
commercial real estate deals, and 
that has led to shorter cycle times 
and higher volumes. Page 38 


Here are 
four proven 
Strategies for 
identifying 
and clearing 
out costly 
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SIM Focuses on Advocacy 

Nancy Markle, the new president of the 
Society for Information Management, lays 
out her three-part agenda: awareness, 
chapter growth and the creation of 
alliances for legislative advocacy. Page 40 


BY JULIA KING 


ESEARCHERS ESTIMATE 

that seven out of 10 compa- 

nies have little or no idea 

who exactly uses the soft- 

ware deployed throughout 

their businesses. Many of 
these companies are equally clueless 
about what their software portfolios 
include and whether the applications 
have actually been installed or remain 
shrink-wrapped and collecting dust on 
cubicle shelves. 

In 1999, U.S. corporations wasted 
$90 billion by buying IT assets they al- 
ready owned, buying the wrong tech- 
nology and making unnecessary pay- 
ments for returned and retired hard- 
ware and software assets, according to 
Meta Group Inc. 

Five years later, the same problems 
remain rampant. Gartner Inc. esti- 
mates that most companies typically 
have about a 30% discrepancy between 
what they think is in their IT inventory 
and what they really have. Yet many 
still fail to collect and integrate soft- 
ware usage data into their overall IT 
management plans. Consequently, U.S. 
businesses continue to overbuy licens- 
es for 60% of their software portfolios 
and are noncompliant on another 30% 


OPINION 

The Top Five Issues for Ci0s 
Barbara Gomolski says Sarbanes-Oxley 
compliance, outsourcing, security, 
project prioritization and cost 
management are the hottest issues 
that CIOs will face this year. Page 42 
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of their software assets, Gartner says. 

But poor IT asset management isn’t 
the only culprit. So-called shelfware 
can accumulate as a result of canceled 
or scaled-back projects, corporate 
downsizings, decentralized IT pur- 
chases, a failure to adequately train 
and subsequently monitor users or a 
failure to buy the right technology to 
begin with. 

Here are four proven tactics for 
identifying and clearing out shelfware, 
plus leveraging the software you have 
to yield maximum business value: 


PURCHASE JUST IN TIME. Buying 

only the software you need — 

and only when you're ready to 

use it — sounds simple 

enough. Yet vendors’ offers of 

hefty volume discounts, some- 
times as high as 50%, frequently in- 
duce companies to buy ahead for proj- 
ects still in the planning stages or to 
buy more licenses than they immedi- 
ately need as a way to accommodate 
future growth. Neither option is a good 
deal, experts say. 

“It’s a time-delay issue. The more 
you buy, the better the deal you get up- 
front, but the more maintenance you 
pay down the road,” says Gartner ana- 
lyst Scott Nelson. He notes that ven- 
dors usually peg maintenance fees to 
list prices, not discounted prices, and 


the fees kick in immediately, regardless | 


of whether the software has been in- 
stalled. The upshot is that the long- 


‘Companies that launch a compre- 
hensive software asset manage- 
ment program can expect to save 
eR ORS heme) Mm OLE RLY TUE) 
budgets, according to Dave 


Dworkin, director of product man- 
agement at Isogon. Best of all is 
that the bulk of savings are locat- 
ed in one convenient place - your 
corporate mainframe. 

eR CCR ORC lee cei 
management program with desk- 
Plime ae MULL Gy 
that’s the biggest problem, but it’s 
not the area of immediate sav- 
ings,” Dworkin says. “It’s much 
better to start with the main- 
eee OTE Cle) mney 
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term savings are negligible. 
That’s one big reason CIO Jim Jack- 
son says he doesn’t purchase software 


suites for his company, Intertape Poly- 


mer Group Inc. in Bradenton, Fla. In- 


stead, Jackson and his IT team identify 


the specific requirements of a user 

group and then buy an off-the-shelf 
software package that meets 70% to 
75% of those requirements. 


“That way, I achieve immediate ben- 


efit on the implementation of that 
product,” he explains. “I then look at 
the remaining requirements and, in 


most cases, I can go out again and buy 
another off-the-shelf package and bolt 


it on and achieve up to 90% of the 
original requirements. I’ve never had 
to go more than one iteration beyond 
[the original package].” The result: “I 
don’t have software sitting on the 
shelf,” Jackson says. 


HIRE A SOFTWARE EVANGE- 
LIST. “You have to put 
someone in place and 
make them accountable 


for watching over an appli- | 


cation to make sure it has 
a business impact,” says CIO Rich 
Bursek at Lydian Trust Co. in Palm 
Beach Gardens, Fla. 


Lydian recently implemented a mul- 


timillion-dollar IP telephony system 
from Cisco Systems Inc., and Bursek 
hired a dedicated person whose job is 
to make sure that users leverage all of 
the system’s features. The evangelist 


they are and you have full-time 
systems administrators who can 
go after them.” 

Dworkin also says the best time 
to start a software asset manage- 
ment program is when a new CIO 
or CEO comes on board. “Those 
people don’t have a history. It’s 
their job to come in and get a jump- 
start.” In contrast, he says, veter- 
an CIOs can be defensive about 
launching an aggressive software 
asset management program. “A lot 
of them see it as [an effort] that’s 
going to definitely prove they 
haven’t been doing a good job for 
the past five years,” Dworkin says. 

- Julia King 


also conducts ongoing 
training and looks for addi- 
tional ways to integrate the 
new IP telephony system 
with existing software. 

Bursek also hired an 
evangelist for Lydian’s de- 
ployment of enterprise 
business intelligence and 
reporting software from 
Crystal Decisions Inc. Be- 
cause evangelists feel they 
have ownership of their particular ap- 
plications, they tend to be passionate 
about their use, Bursek says. 

| But constant vigilance is also criti- 
cal. Almost two years after completing 
a new $10 million customer service 
and call center system, PacifiCorp, a 
Portland, Ore.-based electric utility, 
continues to monitor employees’ usage 
and gather their feedback about the 
system as a way to gain maximum 
business value from it. 

“After a system goes in, we monitor 
who's using it and ask if they need ad- 
ditional training and hold focus groups 
to see what changes they’d make,” says 
Jann Davis, director of systems devel- 
opment and asset management. 

One of the initial goals of the system 
was for PacifiCorp’s 325 call center 

| agents to handle 80% of incoming calls 
| in less than 20 seconds. This entailed 
scripting responses tailored to the 
types of calls that typically came into 
the company’s two call centers. But 

| keeping the team to the 80/20 rule was 
| a problem because certain team mem- 
| bers wanted to script responses for the 
| rarest types of customer requests, says 
Davis. “I had to keep pointing out we 
didn’t need a Ferrari,” Davis says. 


CHARGE FOR SOFTWARE 
USAGE. If only one or two 
departments use a soft- 
ware application that 
costs, say, $500,000 a year 
in license and mainte- 
nance fees, shift the expense to those 
departmental budgets, suggests Dave 
Dworkin, director of product manage- 
ment at Isogon Corp., an asset manage- 
ment software and consulting compa- 
ny in New York. “We see these types of 
applications all the time,” he says. “And 
it’s amazing how quickly the depart- 
ment can do without the application.” 
A variation on this pay-your-own- 
| way model is in place at Houston- 
based BMC Software Inc., where all 
software purchases are approved by IT 
but are paid for by individual depart- 
ments. “If someone wants a new appli- 
cation, they come to IT and ask for it, 
but they come with their checkbook,” 
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says CIO Jay Gardner. An 
added benefit of BMC’s 
centralized buying and 
strict IT governance model 
is a much more accurate 
picture of the company’s 
hardware and software in- 
ventory and overall IT in- 
frastructure usage. 

“To control costs, you 
need a good understanding 
of which applications are 

using which servers, network compo- 
nents and databases. IT and CIOs have 
been forced to be more cognizant of 
this issue because they’re much more 
accountable for the money they 
spend,” Gardner says. 

On the other hand, Lydian’s Bursek 
says a decentralized IT buying model 
can also keep departments from over- 
buying software or buying software 
that languishes unused. At Lydian, 
each business unit has its own technol- 
ogy group and its own profit-and-loss 
responsibility. “They don’t want to 
overbuy because it has a direct impact 
on their P&L,” Bursek says. 


REUSE AND RETIRE. Busi- 

ness departments seeking 

a new piece of software at 

The Vanguard Group Inc., 

a mutual funds giant in 

Valley Forge, Pa., take 
their requests to the so-called tech 
team, through which all IT acquisi- 
tions are made. Reusing standardized 
software already in place is the team’s 
top priority. “If a [user] group wants an 
ad hoc reporting tool, we'll go through 
our [enterprisewide] inventory of ap- 
plications, and if we have a standard 
tool in place, we tell them what it is 
and what it does. Then their job be- 
comes knocking out the incumbent 
software,” explains John Mercante, a 
principal who heads Vanguard’s tech- 
nology operations. Replacing software 
is a zero-sum exercise at the company. 
Multiple software tools and applica- 
tions that do the same thing simply 
aren't tolerated, he says. 

That’s why retiring software is just 
as important as buying it, Mercante 
emphasizes. In 2002, Vanguard retired 
87 software products when better ones 
came along to take their place. In 2001, 
it retired more than 100 applications. 
The company also has a dedicated pro- 
gram manager of software retirement. 

“Pulling the plug is a very key metric 
for us,” says Mercante. “We constantly 
look at what we brought in and what 
we've retired. It pays huge benefits, but 
you have to control monitoring and ac- 


countability.” @ 43585 
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New system turns radio messages from the 
locomotive into shipment-tracking data for 


ANY CASUAL SHIPPER can tap into a FedEx 
or UPS Web site and determine the lo- 
cation of even the smallest of pack- 
ages. But until recently, The Burlington 
Northern and Santa Fe Railway Co. 
(BNSF) tracked its trains the old-fash- 
ioned way, through two-way voice ra- 
dios located in every locomotive cab. 
Train crews dropped off cars 
and then radioed that informa- 
tion back to a dispatcher at 
BNSF'’s high-tech network oper- 
ations center at the railroad’s 
headquarters in Fort Worth, Texas. 
The dispatchers would then have to 
type these reports into DB2 databases 
running on IBM mainframe computers. 
Though BNSF could communicate 
with train crews over engine-cab ra- 
dios hooked into a private microwave 
system that spanned 14,000 miles in 27 
states, the system provided “static in- 
formation,” according to John Hicks, 


aN 
pt 


managers and customers. By Bob Brewin 


BNSF’s director of unified messaging. 
Crews would start their day with writ- 
ten work orders and turn them in at 
the end of the day — with periodic 
calls to report cars dropped off or 
picked up. Jeff Campbell, BNSF’s CIO, 
viewed this approach as outdated, 
cumbersome and incapable of meeting 
the demands of customers and 
railroad management for near- 
real-time data. Last year, BNSF 
launched a project to automati 
cally turn those voice radio calls 
into data capable of integration into 
the company’s computer systems. 
Campbell says BNSF decided to use 
its voice radios as the interface to an 
interactive voice response system and 
tapped ScanSoft Inc. in Peabody, Mass., 
to provide it with speech-recognition 
software. ScanSoft had never integrat- 
ed IVR with a radio system before, and 
the company found it a challenge, said 


Race Cm Ea sR UMC 


Rob Kassel, ScanSoft’s senior product 
manager for network speech. 

That’s because two-way radio sys- 
tems have lower fidelity than the 
phone lines traditionally used with 
IVR. The fidelity problem was com- 


pounded by the noisy environment of a 


locomotive cab, Kassel adds. ScanSoft 
built the BNSF IVR application on its 
SpeechWorks software and added 
noise filters. ScanSoft also sampled en- 
gineer radio calls to teach the software 
to recognize speech generated in such 
a noisy environment. 

Although this is an unusual applica- 
tion of an IVR, Dan Miller, an analyst 
at Zelos Group Inc. in San Francisco, 
says radio-to-data interfaces are the 
next frontier for [VR systems. There’s 
a “huge growth potential” within many 
industries, including trucking, utilities 
and field service fleet firms, he says. 

Once ScanSoft completed its work, 
Campbell says, BNSF integrated the 
SpeechWorks software with an IVR 
platform from Intervoice Inc. in Dallas 
and a digital radio interface from Telex 
Communications Inc. in Burnsville, 
Minn. Beth Bonjour, assistant vice 
president of technology at BNSF, says 
the railroad then wrote the middle- 
ware to integrate what the company 
calls the Radio Telephony Interface 
(RTD into its systems. 


Dispatchers at BNSF’s network oper- 


ations center control the RTI through 
a phone icon on their screens, Hicks 
says. This shows all the radio frequen- 
cies as well as cell phone and landline 
connections. When a train crew calls 
in, the dispatcher clicks on the appro- 
priate link, and the RTI takes the crew 
through an interactive audio menu 
with prompts for information such as 


| car number and location. 


BNSF rolled out the RTI in its Fort 
Worth division last year and plans to 
take it systemwide by 2005, starting 
with its Gulf and East Texas divisions 
this year, Campbell says. He declines 
to break out the cost of the RTI but 


| says BNSF’s IT budget will hit $274 


million this year, up $1.5 million from 
2003. 

The result, Hicks says, is a system 
that automatically integrates radio 
calls with back-end systems, providing 
BNSF with a level of visibility into its 
trains and individual cars it never had 
before. Campbell says this “improves 
customer satisfaction” by allowing 
BNSF to update its Transportation 


| Support System in near real time. The 


RTI allows BNSF to provide customers 
with more frequent information on car 
moves “and closer expected time of ar- 


rival,” Campbell says. @ 43987 
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A BIG TRAIN SET 


Burlington Northern Santa Fe has started 
to deploy a wireless-LAN-based Remote 
Contro! Locomotive (RCL) system to all its 
switch engines, in hopes of boosting effi- 
ciency and cutting accidents. 

BNSF uses the switch engines to make 
up trains in its rail yards. This involves cou- 
pling cars to the switcher, moving them 
from one track to another and then cou- 
pling them to the new train. This has tradi- 
tionally been managed by a conductor on 
the ground, communicating via radio or 
hand signals with an engineer in the cab - 
and it’s a recipe for accidents, according to 
BNSF ClO Jeff Campbell. The conductors 
can't see the engineers in the locomotives 
and vice versa, a situation that sometimes 
results in bone-crushing injuries. 

BNSF started last year to replace these 
two-person switch crews with one-person 
RCL systems, which consist of a belt-pack 
device worn by a yard worker that mimics 
all locomotive controls - including the horn 
- and is hooked up by a WLAN link to a 
controller in the unmanned cab. 

BNSF uses RCL systems from Saint- 
Laurent, Quebec-based CANAC Inc. and 
the Erie, Pa.-based GE Transportation Sys- 
tems division of General Electric Co. The 
CANAC WLAN operates in the licensed 
450-MHz band, while the GE version oper- 
ates in the unlicensed 900-MHz band. 

Though RCLs might seem hazardous, 
Campbell says that in 10 years of use on 
Canadian railroads - which pioneered RCL 
- yard accidents have dropped 40%. The 
RCL belt pack has built-in safety features, 
including a tilt mechanism that shuts down 
the locomotive if the operator bends by 
more than 45 degrees. 

BNSF currently has 220 switch locomo- 
tives equipped with RCL. The railroad ex- 
pects to have all its switch engines 
equipped with RCL by 2005 

Campbell says thai, besides improving 
safety, RCL has already started to pay off 
on the bottom line. “We can build a train 
faster with one person than two, and we 
don't need switch engineers any longer,” 
Campbell says. The switch engineers are 
all being offered jobs on long-haul freights, 
he adds. 

- Bob Brewin 
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HE IT ORGANIZATION at GE 

Real Estate has automated 

most of the front-end proc- 

esses for commercial real es- 

tate financing, which means 
employees can close deals faster and 
move on to the next ones. 

That’s important because, while 
most of the U.S. economy has been 
sputtering over the past three years, 
the commercial real estate sector has 
been white-hot. Prices for shopping 
malls, office buildings and industrial 
complexes have shot through the roof 
with intensified competition. 

“It’s very competitive out there, and 
with interest rates being low, we have 
to work harder to be competitive,” 
Michele Gabriele, director of North 
American technology at GE Real Es- 
tate, a division of GE Commercial Fi- 
> of four finance arms of 


Says 


nance, one 
General Electric Co. 

Not that GE Real Estate had been 
underperforming. In 2000 and 2001, 
the company’s earnings grew 24% and 
25%, respectively, according to GE’s 
annual reports. “Our business was do- 
ing well without much use of technol- 
ogy, but there were real opportunities 
to improve through automation,” says 
Hank Zupnick, GE Real Estate’s CIO. 

Historically, many of the activities at 
GE that support commercial real estate 
financing deals were conducted manu- 
ally, like calling or faxing in the details 
of an engineering report and entering 
them into the deal binder, says Zup- 
nick. Whenever the status of a deal had 
to be updated, that would trigger a 
flurry of phone calls and faxes among 
15 to 20 people, including salespeople, 
underwriters, appraisers and credit 
risk managers, says Gabriele. 

In 2001, GE saw an opportunity to 
automate the lion’s share of those ac- 
tivities while making the sales cycle 
more efficient and accurate. That year, 
the company began developing a cus- 
tomized, browser-based system using 
deal management software from New 
York-based CapitalThinking Inc. 

The Java-based system, which GE 
calls RE Source, electronically cap- 
tures most of the information that goes 
into a commercial real estate deal and 
makes it available online to key parti- 
cipants. That has cut costs and short- 
ened the sales cycle for deals in the $10 
million to $100 million range by 10% to 
20%, says Zupnick. 

“Thanks to this technology, we’ve 
been able to underwrite 25% more 
deals and remove $8 million to $9 mil- 
lion in expense each year for the past 
two years with the same amount of 
staff,” Zupnick says. 
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Although it’s tough to 
quantify the precise im- 
pact the seven-figure IT 
investment has had on the 
company’s revenue, Zup- 
nick says that the 
paid for itself within a 
year. In addition, GE Real 
Estate’s earnings rose 23% 
from $650 million in 2002 
to $845 million in 2003, 
according to Dan Smith, senior vice 
president of the North America Debt 


stem 


group in Dallas. 

“The revenue side is a lot trickier to 
measure, but we hear a lot of people in 
the company saying we wouldn’t have 
been able to do as many deals and do 
them faster than we could two years 


Stamtord, Conn 
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ago,” he adds. 

“The bottom-line im- 
pact is more apparent 
from a productivity stand- 
point” than the top-line 
ins are, says Smith. 

For instance, GE sales- 
people used to travel 
more often to get needed 
changes and approvals on 
deals, says Gabriele. By 
creating a collaborative system where 
approvals can be done electronically, 
she says, salespeople “are freed up in 
the field to work on the next deal.” 

Zupnick acknowledges that competi- 
tors such as Royal Bank of Canada and 
J.P. Morgan Chase & Co. have invested 
in comparable systems. Indeed, com- 
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mercial real estate management has 
become much more automated than it 
used to be, says Thomas Glendening, 
president of Front Street on the Hudson 
LLC, a Newburgh, N.Y.-based developer 
of distressed commercial properties. 

“Even at a conventional level, what 
used to take weeks and months for fi- 
nancing approval can now be done in 
hours,” says Glendening. 

Investments in GE’s RE Source proj- 
ect included adding Oracle database 
licenses; adding Sun Microsystems 
V880 Unix servers for testing, staging, 
production and backup systems; and 
hiring a few Java programmers and 
cross-training some veteran IT work- 
ers on Java, says Gabriele. 

The core system was customized by 
GE development teams in Stamford, 
Conn., and Dallas, and by Capital- 
Thinking. It is used by about 1,000 
people and includes workflow, docu- 
ment management, reporting and 
e-mail notification capabilities. 

When the system went live in Janu- 
ary 2002, 10 people from both Capital- 
Thinking and GE were working on the 
project. Now nine GE staffers provide 
support and additional enhancements 
to RE Source. 

Zupnick and Gabriele’s team 
brought in end users from a variety of 
departments early on and asked them 
how the system could be enhanced to 
make them more productive. Getting 
business peers to free up their time to 
work on the system “is often one of the 
biggest challenges,” says Zupnick. But 
he and Gabriele were able to gain their 
commitment by highlighting the bene- 
fits of the system. 

For example, RF Source uses color- 
coded fields to reflect a deal’s status, 
such as whether the financing terms 
have been proposed or accepted. And 
if a deal gets approved, says Gabriele, 
salespeople are automatically notified 
on their BlackBerry devices. GE sales- 
people can send and receive informa- 
tion about a pending deal using their 
BlackBerries, but they can’t approve 
deals using their mobile devices, says 
Zupnick. GE will consider adding that 
feature next year. 

GE schedules four updates to the 
system each year. Current work in- 
cludes incorporating an enhanced ver- 
sion of the system that’s used in Japan 
to make it easier and faster for sales- 
people to prescreen potential deals, 
says Gabriele. 

Whatever enhancements do come, 
Zupnick sees them as affirmation of a 
successful project. “That the business 
is continuing to invest in technology is 
a validation of our work.” @ 44009 
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SIM Focuses 
On Advocacy 


Nancy Markle this month 
starts her one-year term 
as president of the Soci- 
ety for Information 
Management (SIM), a 
Chicago-based profes- 
sional association that 
provides resources and 
programs to help IT 
leaders develop their 
management skills and enhance their 
business knowledge. She has worked as 
a consultant and was formerly CIO at 
Arthur Andersen LLP. Markle spoke 
with Computerworld’s Jean Consilvio 
about what she hopes to accomplish in 
the coming year and what CIOs can 
gain from being members of SIM. 


Has SIM membership increased? It’s been 
growing by about 5% to 10% a year. 
We've got about 70% C1Os/DIOs [di- 
rect reports to CIOs] and senior IT 
leaders, and 30% are thought leaders, 
academicians, that type of thing. 


What are thought leaders? We look at 
people who are in consulting or other 
areas, such as vendors and vendor 
partners. We select those who we 
think are going to contribute to the 
IT industry. 


How has the group’s demographics changed? 
[About six or seven] years ago, we set 
as a goal to make it about 70% on the 
CIO level and to move out of a vendor- 
type of relationship into a more part- 
ner/thought-leader type of relation- 
ship. We’re there and intend to keep it 
that way. 


| How’s meeting attendance? [ At] our last 


national conference in New York, we 
had 600 people attend. It really de- 
pends on what it’s all about. If you 
have good speakers and really excel- 
lent topics, they will come because 


| they can learn. There might be a chap- 


ter meeting that isn’t well attended, 
and it probably was because the inter- 


| est level wasn’t there. 


What are your priorities for this year? I have 
three areas of focus. One is increasing 
awareness of what we’re about and the 


| advocacy areas. The second is helping 


the chapters in terms of supporting 
them, new-chapter development and 
helping the existing chapters learn 
from each other as well as getting sup- 


| port from the executive committee. 


The third is the evolution of SIM — 
the growth of CIOs, collaboration part- 


| ners and helping all of us to be better. 


We're talking to other groups that are 


| trying to do similar things for their in- 


dustry, like FEI [Financial Executives 


| International], about some collabora- 
tion. We’ve already done webcasts to- 


gether, and we're talking about joining 
on advocacy and other things. 


| How are you bringing in new blood, other 
than the Regional Learning Forum students, 
| who are members only while they're in that 


program? We invite CIOs as potential 
members to attend regional confer- 
ences, so as they learn about the advan- 
tages of being a member and what that 


| brings to their careers and companies, 


their interest is piqued. That’s where 
we get a lot of additional membership. 


| What are three significant things a CIO at a 
| large company can get out of being a mem- 


ber of SIM? The No. 1 is networking 
with other CIOs and finding out their 


| successes, challenges, who they’re 


working with, finding out those who 
are doing the same type of projects. 
And there are learning opportunities 





| at the conferences, meetings and 


through the special education pro- 
grams we have. We just started the 


| Strategic Business Leadership Program 
| because we're finding that the No. 1 


area of interest is the alignment be- 
tween technology and the business. 
CEOs have told us that they want their 
CIOs to talk to them in business terms. 
They want to know the ROI and poten- 
tial challenges from a business per- 


| spective. They don’t particularly want 


to talk about technology; instead, they 
want to talk about how their business 


| will change and grow and prosper as 
| aresult of changing the way they do 


business through technology. 
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The last thing is about giving back 
and making the IT profession better, 
being more proactive in advocating 
things [in the public policy field] that 
will help the industry. 


What legislation might SIM be involved in 
this year? There’s a lot of legislation 

coming down, like Sarbanes-Oxley, 

| privacy and HIPAA regulations. 


But can SIM help? We research the legis- 
lation that’s coming down and look at 
the potential problems with it. It 

| sounds good on paper, but when you 
go to implement it the way it’s written, 
it might be pretty onerous. Where if 


| it’s written slightly differently, you’d 

| get the same effect, but you wouldn’t 
| have a great deal of money and time 

| being spent by an organization trying 


to implement it. 
On the other hand, if there looks like 
there’s legislation coming in that we 


| don’t think is in the best interest of the 
| 


technology community, we'll try to see 
what we can do about changing that 
legislation or defeating it. An example 
of that would be the UCITA last year. 
And we are absolutely looking at Sar- 
banes-Oxley. 


How do you investigate looming legislation? 


| We have a vice president for advocacy 
| and communities of interest who is on 


our board. We poll the membership 
and see who is interested in that par- 
ticular legislation. We form a group, 
and we use the SIM Web site to make 


| it available to the membership at large. 


That group researches it and comes 
up with recommendations for SIM. 
We send that out to the chapters for 
feedback. 

In some cases, we’ll align with other 
organizations that are doing similar re- 
search. We aligned with AFFECT 
{Americans for Fair Electronic Com- 
merce Transactions] for UCITA. With 
Sarbanes-Oxley, we may be aligning 
with FEI, but that’s not definite yet. 


Do you think ClOs have lost credibility with 
their CEOs and CFOs? I don’t think they’ve 
lost credibility; I think the credibility is 
spotty. At our national conference, Dick 
Nolan, who is a Harvard professor, said 
that boards are beginning to have a 
fourth major committee, [called] tech- 
nology oversight. FedEx has it; a num- 
ber of banks have them. I think what 
you're going to be seeing over the next 
year is more demand on the CIO’s rela- 
tionship with his peers, more demand 
by the board for the CIO to be visible 
and explaining what’s going on from a 
technology perspective. @ 43995 
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1. Automatic overview of operation. 
2. Automatic shipping of sale. 

3. Automatic identity verification. 

4. Automatic updating of inventory. 
5. Automatic tracking of delivery. 
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Midwest Bank 
Hires Security Exec 


Kurt A. Troyer has joined Midwest 
Banc Holdings Inc. as vice presi- 
dent and information services se- 
curity officer. He will lead securi- 
ty efforts for e-mail, data proc- 
essing and related IT systems 
across Midwest Banc and its four 
subsidiaries. He also will be re- 
sponsible for setting policies and 
security standards as well as the 
auditing of operations at the Mel- 
rose Park, Ill.-based bank holding 
company. Troyer most recently 
was vice president of IT at Covest 
Bank NA in Des Plaines, lll. 


Automotive Lender 
Promotes CIO 


Onyx Acceptance Corp., an auto 
lender in Foothill Ranch, Calif., 
has promoted its ClO, Todd Pier- 
son, to executive vice president 
and chief operating officer. Since 
1999, Pierson has been responsi- 
ble for all IT systems, applications 
and communications. In his new 
role as COO, he will have the 
added responsibility of all loan 
servicing operations. Pierson 
started his career 18 years ago as 
a systems engineer at Hewlett- 
Packard Co. In 1991, he joined 
Ceridian Tax Service. 


NPR Names CIO 


National Public 
Radio, a nonprof- 
it radio service in 
Washington, has 
hired Robert G. 
Holstein as C10. 
He will manage 
the communica- 
tions systems and IT infrastruc- 
ture that support more than 700 
employees in 36 locations world- 
wide. He will also be responsible 
for creating processes for IT in- 
vestment and sourcing. Holstein 
has 23 years’ experience in com- 
munications and IT. He most re- 
cently spent seven years as busi- 
ness information officer at Capital 
One Financial Inc., where he built 
the infrastructure for the telecom 
businesses the credit card issuer 
owned from 1995 to 2001. 











The ‘lop 


BARBARA GOMOLSKI 


LTHOUGH many of us are looking for- 

ward to this new year with an eye toward 

the improving economy, it’s shaping up to 

be a challenging one for IT managers. 

Here are the most important IT manage- 
ment issues that CIOs will confront in 2004: 


1. Sarbanes-Oxley. While 
the Sarbanes-Oxley Act is 
mainly about accounting 
reform, it will have big im- 
plications for IT organiza- 
tions in the coming year. In 
the first phase of Sarbanes- 

Oxley projects, already 
well under way in most 
companies, IT has been 
asked to work closely with 
finance and outside audi- 
tors to catalog existing fi- 
nancial reporting systems. 
(If the IT group isn’t in- 
volved at this stage, that’s a 
red flag.) 

To date, finance departments have 
taken the lead on Sarbanes-Oxley 
compliance, and IT departments have 
been participating from the sidelines. 
However, you should expect the IT or- 
ganization’s involvement to grow as 
this megaproject moves to the next 
level. Better yet, get involved in Sar- 
banes-Oxley compliance efforts in 
your organization now, so you won’t 
be blindsided by the requirements for 
the budget and labor resources you'll 
have to apply to this initiative. What’s 
more, your participation at the early 
stages will greatly improve the 
chances that your company will ulti- 
mately succeed in its efforts to comply 
with the legislation. 

2. IT sourcing. How and where will 
you get your IT organization’s work 
done? That’s a question many IT lead- 
ers will grapple with in the coming 





year. Some IT managers 
will be wooed by the off- 
shore outsourcing hype 
without fully understand- 
ing the risks. Others will 


ternative sourcing models 
in order to maintain the 
status quo. In some compa- 
nies, the chief financial of- 
ficer will drive the push to 
outsource IT, believing it 
to be the most cost-effec- 
tive approach. 

In 2004, many IT leaders 
will have to evaluate their 
current methods of 

staffing, as this issue is now visible at 
the highest levels of the organization. 
Therefore, it behooves IT managers to 
proactively consider their sourcing 
options, keeping in mind that those 
options will continue to evolve 


throughout the year. 


A key part of this exercise is deter- 
mining whether your current model al- 


| lows the IT organization (and the com- 


pany as a whole) to be competitive. 
Answering this question will prove dif- 
ficult for the many CIOs who lack the 
internal statistics to determine the IT 
organization’s core competencies. For 
many IT leaders, the best approach 
will be to step back and determine 
what the IT group is really good at, be- 
fore diving into a new sourcing model. 

3. Project prioritization. I won’t belabor 
this one, because my previous column 
dealt with this topic [QuickLink 





Five 


Issues for CIOs 


42986]. Suffice it to say that there’s a 
backlog of work for IT organizations, 


| but only a little more money in 2004. 


Sound project prioritization and gover- 
nance is needed to avoid a train wreck. 
4. Security. If you couldn’t tell from 


the persistent virus outbreaks in 2003, 


we aren't done with this problem yet. 
Despite their best efforts, many com- 


| panies were temporarily crippled by 
| viruses last year. These high-profile 
| Outages are bad for business and bad 


for IT organizations. Expect 2004 to 


: | bring growing interest in behavior- 
fail to take advantage of al- | : : 
: 8 | based blocking technologies (that scan 


PCs for security policy violations 
when the PCs connect to the network) 
and intrusion-prevention technolo- 
gies. During 2004, companies will also 
continue to deal with business conti- 
nuity planning. Many enterprises will 
struggle with the basics of disaster re- 


| covery, while more advanced users 


will move on to business process re- 
siliency and recovery, as well as im- 
proving incident response and crisis 


| Management. 


5. Continued focus on cost. While IT 


| budgets are stabilizing, there will con- 


tinue to be a focus on cost this year. 
Cost reduction is now a core compo- 
nent of many IT organizations’ ongo- 
ing improvement programs. The chal- 
lenge here is to continuously drive out 
unnecessary costs without hurting the 
organization in the long run. 

Expect a greater level of account- 
ability throughout the enterprise re- 
garding cost, too. Promised cost sav- 
ings are more likely to be tracked, and 
managers will increasingly be held ac- 
countable and rewarded based in part 
on their ability to deliver the expected 
savings. @ 43992 
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Middleware is Everywhere. | Can you see it? 





MIDDLEWARE IS IBM SOFTWARE. S 


DB2 Content Manager. A complete and open s 


1. Verifies insurance on the spot. 
2. Files digital claim in an instant. 


3. Approves estimate at the site. 
4. Orders new bumper at the scene. 


5. Receives settlement in a snap. : 0 ibm.com/db2/middleware 
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HCL TECHNOLOGIES AMERICA, INC 


HCL Technologies America, inc. and its affiliate companies, 
like HCL Technologies (Illinois) Inc., and HCL Technologies 


(Mass.) Inc 


have multiple openings at its offices in 


Sunnyvale, CA; Stamford CT; Plano TX; Florham N4J, Irvine 
CA, Vienna, VA, Boston, MA, Chicago, IL, Detroit, M! as weil 
as project sites throughout the United States for the following 


positions 


Software Engineers 
Programmer Analysts 
Systems Analysts 


Database Administrators 


Systems/Network Administrators 


Project Managers 


Account Managers/Sales Managers/Business Managers 


Sales Engineers 
industrial Engineers 


Market Research Analysts 


Management Analysts 


Salary will be commensurate with education and experi 
ence. All positions may involve travel or relocating to vari- 
Dus Client sites through out the US 


For consideration please send your resume to 


HCL Technologies America, inc 


Attn.: HR Dept. (Computerworld Ad.) 


330 Potrero Avenue 
Sunnyvale, CA 94085 


Email: cwjobs@hcitech.com 


Please indicate the location and the position you are 


applying for 


www.hcitechnologies.com 


ality Control Engineer: Under 
direct supervision help to ensure 
the integrity, stability, usability 
f al ompany 
cations. Assist in 
id black box tes! 

manual and aut 

j with industry star 

ripting languages 
SIC pi amming in 
SH Perform 
with the help of 
student in Requirements 
include a B jor's degree or 
equivalent ir mputer Science 
an Engineering 
related field and 
rience in the job 
of com- 
Dlicants must 

rizatior 

ne United States 
year 40 
Respond with two 
resume to Case 
Labor Exchange 

1st F 


Programmer/Analyst 


Simpsonville, South 
st be able to de 


ms. Will be re- 
stallation of soft- 
providing technical 


to program users 


Masters degree in 

Science. Must have 

ith object-oriented 

program the software de- 
ycle, relational 

and the latest 

vent tools 

t be at appli- 

it's expense. To apply please 

nit resumes to: Castle 
Solutions, Inc. 114 Sandhurst 
Drive, Simpsonville, SC 29680. 


Programmer/Analyst needed for 
Software Deve ent, Ser- 
vices & BPO firm located in 
Burlington, VT. Job duties in- 
clude: Analyze avelop, code 
test and implement computer 
software applicati systems in 
client server web-based 
environments for clients located 
st coast. Develop 

Sist in content and 
management. Use JSP. 

Java, Oracle and Windows NT. 
Perform work as part of a team 
under direct supervision. Appi: 
cant must have B.S. degree in 
Computer Science, Business 
Mathematics or Engineering 
Degree based upon combination 
of academics and experience is 
lable. Applicant must also 

yrs. exp. in the job duties 
described above or in any com- 
puter related occupation which 
includes the skills lis above. 
40hrs/wk, 8:00am-5:00pm, Mon 
Fri, $52,936/yr. Send resumes 
612531, P.O. Box 

VT 05601 


JUNIOR SYSTEMS ADMINIS. 
TRATOR-Financial manage- 
ment firm seeks Junior Systems 
Administra for its 250 nodes 
Linux cluster for trading pro- 
grams. Di include cluster 
administration (building Linux 
kernels, building packages, log- 
file analysis, writing automation 
scripts, monitoring nodes, per: 
formance tweaking & trou- 
bleshooting) & management of 
house support infrastructure. 
ily administration of 
Cs and 250 Sun 
es utilizing UNIX 
Backup administration using 
Legato Networker with 600+ 
tapes. Bachelor's degree in 
Computer Science 
Engineering (any field) and 
least 6 month experience 
required. Salary according to 
experience. Mail resume to 
RTC, 600 Route 25A, East 
Setauket, NY 11733, Attn: JR 


Computer Professionals 
(Multiple Openings) 


Software Engineer/Systems 
Analyst/Database Administra- 
tor/Network Administrator 


Chatham, iL. 


Must have bachelors degree 
or equivalent and experience 
in some of the following 
skills: C/C++, Java, Web Meth- 
ods, Cold Fusion, Microsoft 
Technologies (Visual Basic 
NET, ASP) CRM (Siebel, Clar- 
ify, Vantive), Middle Ware Tech- 
nologies (Orbix, Corba, Tibco 
Vitria) Data Ware Housing Tools 
(Informatica, Data Stage, Abini- 
tio, Business Objects, Cognos 
Micro Strategy, Brio) ERP (SAP. 
People Soft, Oracle Apps 
Baan), Mainframe (Cobol, CiCS 
JCL, VSAM) AS400, Ecom- 
merce, Databases (SQL Server 
Oracle/DB2/Sybase), Microsoft 
Windows(95/98/NT/2000,Excha 
nge), UNIX (Sun Solaris, HP, 
AIX), Linux and QA (Win Run- 
ner, Load Runner, Silk, Quick- 
pro, Manual Testing) 


Position requirement: Must be 
willing to travel and /or relo- 
cate per project specification. 


Mail your resumes to: jobs@ 
amsolinc.com 


or 


Human Resource Director 
American Solutions Inc 

145 North Market Street, Suite 1 
Chatham, IL 62629-1326 


Programmer/Analyst needed for 
Software Development, Servic- 
es & BPO firm located in Bur- 
lington, VT. Job duties include 
Analyze, develop, code, imple- 
ment and test computer soft- 
ware applications/systems in a 
mainframe/legacy environment 
for multiple clients located 
throughout the East coast 
Projects include development 
and conversion. Use COBOL 
PL/SLQ, DB2, VSAM, JCL, and 
UNIX. Perform work as part of a 
team under direct supervision 
Applicant must have B.S. de 
gree in computer science, engi- 
neering, math, or business 
Applicant must also have 2 yrs 
exp. in the job duties listed 
above or in any computer relat- 
ed occupation which includes 
the skills listed above. 40hrs: 
wk, 8:00am-5:00pm, Mon-Fr 
$52,936. nd resumes to 
Job No. 612582, P.O. Box 488. 
Montpelier, VT 05601-0488 


SENIOR PROGRAMMER/ANA- 
LYST to analyze, design, devel- 
op, implement and maintain 
web-based application software 
ina nserver environment 
using object-oriented method 
ologies, C, C++, VC++, MFC 
SQL Server, InstallShield, XML 
HTTP, ATL, STL, COM/DCOM 
Java, J2EE and WebLogic un- 
der Windows NT/2000 operating 
systems. Require: B.S. degree 
in Computer Science, an Engin 
eering discipline, or a closely re- 
lated field with 2 yrs of exp. in 
the job offered or as a Software 
Engineer. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume to: Debra 
VanderMeer, Chutney Technolo- 
gies, Inc., 11 Piedmont Center. 
3495 Piedmont Rd, Ste 289 
Atlanta, GA 30305; Attn: Job AP. 


COMPUTER SYS 
ADMINISTRATOR want- 
ed by Refurbishing comp 
in S. Hackensack, NJ 
Must have Bachelor's 
Degree or Equiv in Comp 
Sci, Math or Elec Engg + 
Exp. Respond to: Teamex 
Corporation, 10 

Bivd., S. Hackensack, NJ 
07606. Attn: J. Lee 


Programmer Analyst, Senior in 
Chicago, IL to plan & implement 
Enterprise Resource Planning 
using JDE Tool set, Enterprise’ 
Report writer and using JD 
Edwards One WorldXPi & 
World Technology tools; design 
develop & maintain various 3rd- 
party products interfacing w/ 
JDEdwards syst. (updates. 
security maintenance and 
admin); Provide 3rd level tech 
support including Help Desk and 
tech support staff in trouble 
shooting issues; Monitor JDE 
systems including diagnosis and 
implement solutions; coordinat- 
ing JDE systems, third party 
operational requirements with 
overall IS operations and cus- 
tomer requirements; Maintain 
up-to date documentation for 
JDE, including admin. functions 
Train other IS personnel in the 
use and support of JDE and 
third party products. Req's B.S 
in Comp. Sci., Comp! Appl. or 
Elect. Eng., and prior experi- 
ence as a Programmer Analyst 
Also req's expertise in JDE One 
World Technology and in devel. 
opment/maintenance of financial 
planning applications Send 
resume to Equity Office 
Properties, CJ 1128 2 N 
Riverside Plaza, Chicago, IL 
60606 


COMPUTER PROFESSIONALS 


Opportunities for 

+ PROCE CAPABILITY 
ANALYS 

* QC ANALYST 

+ WEB ARCHITECTS. 
DEVELOPERS 

SYSTEMS ANALYSTS 
WEB GRAPHIC DESIGNERS 
NETWORK ENGINEERS 
PROGRAMMER/ANALYSTS 
SOFTWARE ENGINEERS 


SKILLS 

* COLD FUSION « SPECTRA 

* ORACLE * VISUAL BASIC 

* VISUAL C++ * SIEBEL * ASP 

. ICOM + JSP » HTML 

JAVA BEAN + EJB JAVA 
S + WEBSPHERE 
SERIES + XML.UML 
MTS + CLARIFY * PERL 

* OBJECTPERL +» SPYPERL 

* SMALLTALK + PL/SQL 

* VISUAL AGE + COBOL, SPL 

UNIX 


Visit our website @ 
www.computerhorizons.com 


Attractive salaries and benefits 
Please forward your resume to. 
H.R. Mgr., Computer Horizons 
Corp 49 Old Bloomfield 
Avenue, Mountain Lakes, New 
Jersey 07046-1495. Call 
99-4000. E-mail: jobs@ 
uterhorizons.com. An 
Equal Opportunity Employer M/F 


Sr. DBA. Planning, capacity 
modeling, design, validating 
tuning, supporting & maintaining 
large (500G+) CRM database 
hosted in SQL2000 ASP model 
Design & validate 
customer req. to meet 9999 
Level Agreements 
BS comp sci or related & 4 
yrs exp. as DBA with 2 yr 
port large CRM DB & istered 
tech. SQL2000 using MS 
Dot.net, including modeling 
design, validating, support & 
maintenance. Perm workers 
only. Resumes to: K Cramer, 
Reynolds and Reynolds, P.O 
Box 2608, Dayton, OH 45401 


(clustered) 


Software Engineers for Nap- 
erville, iL office. Develop soft- 
ware applications using C 
C++, VB, Delphi, ASP, XML 
UML, Coolgen, Interwoven 
Oracle, PL/SQL, Developer 
2000 & Designer 2000 
Bachelors or equivalent req'd 
in Computers, Engineering, 
Math or related field of study 
+1 yr of related exp. 40 
hrs/wk. Must have legal auth- 
ority to work permanently in 
the U.S. Send resume to HR 
Manager, Softsol Resources, 
Inc., 48383 Fremont Bivd, Ste 
116, Fremont, CA 94538. 


IT|careers.com 


Seeking qualified applicants for 
the following positions in Mem- 
phis/Collierville, TN: Senior 
Technical Analyst. Research, 
evaluate, implement and coordi- 
nate changes to computer sys- 
tems/applications. Require- 
ments: Bachelor's degree* or 
equivalent in computer science. 
math, engineering or related 
field plus 5 years of experience 
in systems/applications develop- 
ment, including programming 
Experience with Java, Jkarta 
Struts architecture and Web- 
Logic application server technol- 
ogy also required. *Master's 
degree in appropriate field will 
offset 2 years of general experi- 
ence. Submit resumes to Sibi 
George, FedEx Corporate Ser- 
vices, 1900 Summit Tower Blvd 

Suite 1400, Orlando, FL 32810. 
EOE M/F/D/V. 


PROGRAMMER ANALYSTS 
for Naperville, IL office. Devel- 
op & maintain software appli- 
cations using Oracle, SQL 
Server, Erwin, Linux, Sybase. 
XML, UML, Interwoven, Cool- 
gen, ClearCase, ClearQuest 
Plumtree, PVCS, UNIX. Bach- 
elors Degree reqrd in Com- 
puters, Engineering, Math or 
related field of study + 2yrs of 
related exp. 40 hrs/wk, Must 
have legal authority to work 
permanently in the U.S. Send 
resume to HR Manager 
Globalways, Inc, 39176 B 
State St, Fremont, CA 94538 


F/T Instructional Technology 
Support Specialist. Responsible 
for performing and arranging 
repair and replacement of tech- 
nology equipment and network 
in the assigned division 
Research and develop solutions 
to hardware/software issues 
Educational background must 
have included training in basic 
network functions, hardware and 
software, Power Quest Deploy 
Center, Windows CE/IPAQ sup- 
port. configuring wireless 
802.11b technology, Banner 
Peoplesoft and Windows 2000 
Server. Must have a BBA in 
Computer Based Information 
Systems. Salary: Competitive 
Send resumes to: Dr. Dwight 
Call, GA College & State Univ. 
CBX 049, Milledgeville, GA 
31061 


Want a new 
IT career? 
Check out our jobs 
in the combined 


CareerJournal.com 


database. 


Wwww.itcareers.com 








Call (800) 762-2977 


www.itcareers.com 


To Action! 


Take the hassle out of 
searching for the right 


candidate and contact us 


at (800) 762-2977. 


We can place your 
message in front of 2/3 of 


| all US IT professionals. 


| 


| 
| 
| 
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SENIOR PROGRAMMER/ 
ANALYST 

Werner Enterprises, Inc. 
Duties: Analyze, design, modify 
dev J implement software 
prograr 9 applications; par- 
ticipate in re ments gather 
ing, testing code revie 


Education & Training: Bach 


e degree ter 


Hours & Wages 


Reference: Per 


Position is located in Omaha. 
Nebraska. No assistance with 
relocation expenses is offered 
by the Company. Applicant 
must have proof of legal 
authority to work in the United 
States 


perations research, 2 


nathematics 


atics or re 

perience with: dev 
rithms using either ++, Java 
rching and de 
velopinc mization-based and 
heuristic models for large-scale 
network problems; and statisti 
modeling and data analysis 
Statistical software aiso 
required. “Ph.D. in appropriate 
field will offset 2 years of gener- 
al experience. Submit resumes 
to Michael Umiauf, Federal 
Express Corporation 3680 
Hacks Cross Road, H-2220 
TN 38125. EOE 


Laeclacoe meee 


Consultant: Consult with clients 
to define need problem; ana 
lyze requirements and 
on and reco’ 
design, de 
ode 
ycument soft 
ware applica iS and systems 
perform busin analysis to 


wnt Center 
Ste 289 
Job SN 


Systems Analyst. Design im 
plement & test computer net 
work protocols and systems 
using TCP/IP stack, routing 
media access protocols, QoS 
& ATM with C & C++. Also test 
protocol conformance with 
RFC standards. Require 
Ss: Masters in Computer 
ence or Computer Engin 
eering or Electrical Engineer 
ing. 40-hr work. Job/Interview 
Site: Culver City, CA. Send 
resume to Scalable Network 
Technologies Inc 6071 
Bristol Parkway, # 200, Cuiver 
City, CA 90230 


All Stages 
Applications Developer 


in GIS, C 

related field 

proficierit in ArcIMS, ArcG 
SQL ) wk. Send r 
w cover letter to Pa 
Mitchell, HR Process \ 

FL Department of Rever 
O. Box 10410, Tallahassee 
32302 
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Opportunity 


For over 20 years, Syntel employees across North America, Europe, and 
Asia have helped build advanced information technology systems for lead- 
ing Fortune 500 companies and government organizations to improve their 
efficiency and competitiveness. Today, Syntel professionals are building 
rewarding careers by providing solutions in e-business, CRM, Web Design 
and Data Warehousing. 


Come discover why Forbes magazine placed Syntel second on its list of 
‘The 200 Best Small Companies in America” and Business Week ranked 
us #11 on its list of Hot Growth Companies. 


Due to our rapid growth, we have immediate, full-time opportunities for 
both entry-level and experienced Software Engineers, Consultants 
Programmers, Programmer/Analysts, Project Leaders, Project Managers 
Supervisors, Database Administrators, Computer Personnel Managers 
and Computer Operations/Account Managers/Account Executives with 
any of the following skills: 


Mainframe 
* IMS DB/DC or DB2, MVS/ESA, 
COBOL, CICS 


DBA 
* ORACLE or SYBASE 


Client-Server/WEB 
* Siebel * Oracle Applications & Tools 
© Websphere * Lotus Notes Developer 
* Com/DCom e UNIX System Administrator 
¢ Web Architects ¢ UNIX, C, C++, Visual C++, CORBA 
* Datawarehousing OOD or OOPS 
© Informix, C or UNIX ¢ WinNT 
* Oracle Developer or Designer 2000 * Sybase, Access or SOL server 
« JAVA, HTML, Active X * PeopleSoft 
* Web Commerce * Visual Basic 
* SAP/R3, ABAP/4 or FICO or MM * PowerBuilder 
& SD © IEF 


¢ Focus, IDMS or SAS 


Account Executives, Account Managers and 


Business Development/Account Specialist 
positions available. 


Some positions require a Bachelor's degree, others a Master's degree. We also 
accept the equivalent of the degree in education and experience. 


With Syntel (NASDAQ: SYNT, you'll enjoy excellent compensation, full benefits 
employee stock purchase plan and more. Please forward your resume and 
salary requirements to: Syntel, Inc., Attn: Recruiting Manager-LD01, 

525 E. Big Beaver, Suite 300, Troy, Ml 48083. Phone: 248-619-2800; 
Fax: 248-619-2888. Equal Opportunity Employer. 


SYN TEL 


www.syntelinc.com 








SkyMark C 


Programm 


seeks Computer 
iN our Pittsburgh 
PA loc. Work with following lan: 
DBMS's: C++ 
Tomcat, JSP. 
Oracle 


ages and 


ColdFusion 


and pro- 


Nork with 


alee n Reet es 


S/W Engineers to design, de 
velop/maintain web and CRM 
appls using Java, VB, Oracle 
Dev 2000, SQL, JSP, Clarify 
Suite of Products, Weblogic on 
Windows & UNIX OS; provide 
training & user support for the 
systems and related appin inter 
nally & to clients; test, debug 
and modify existing software 

MS or foreign equiv in 


ring(any bran 


Jr. Systems Administrator 
Entry-level position to perform 
general administration of the 
MS based systems & LAN 
Design & maintain Co. web 
sites in both Eng. & Chinese 
No exp. req. Req. B.Sc. or its 
foreign degree equivalent 
based on education & experi- 
ence in CS, IT, Systems 
Engineering or related field 
Resume to: Mgr. American 


IT|careers.com 


Information Systems Analyst 
Maintain & monitor IMPACT soft- 
ware; develop supplementary 
software in Microfocus Cobol 
Visual Basic, ODBC with Tran- 
soft's Mmddyy UDD to ensure 
integration in the financial & 
manufacturing environment 
maintain the communication's 
environment using Axxess-5 
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in job offered of 's in related 
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uitable combination of educa- 
tion, training, and/or work expe- 


Wholesale Inc 389 rience. Send re > A 
Veteran's Memorial Hwy. Warmus, ATR, LLC., Ss 
Erwin St., Catersville, GA 30120 


Mableton, GA 30126 Ref WS 


ns Engineer: Dev 
ns for IBM P 
SP, Regatta 
with AIX certifications; an 


Systems Analysts with 
experience in complex 
inter-operable business ap- 
plications, Progre 4GL 
software, and other tech- 
nologies for advanced level 
positions in Montgomery, 
Alabama. Send resume to 
Jay R. Smith Mfg. Co., Attn 
Mike Polis, 2781 Gunter 
E Park Dr. East, Montgomery, 
— . ices! AL, 36109-0237. Must ref- 
idge pars Ste ) erence job code #ICDC 
Alpharetta, GA 30022. Ref SS EOE 


Jetermine feasibility 
for AIX network & HACMP cor 


figurations formulate/design 
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»grammer Analyst want- 
IT Consulting 
vip, test & impin 
> applics ir 
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DHTML VX XSL 


RWIN Admin skis, ASR/TTS InfoWorld, and 


Technologies 
builder, SQL V 4 ‘ ia ER 
rove Rd aad ea ie a Vhittle ata Corporatior me 


Westchester Aven Network World, 
Help You Do A 
Better Job. 


Software Engineer 


Design/develop appli- 

cation software and 

database applications 

MS in CS or related 

and 1 yr exp in soft- 

ware engineer related eres iehenagess 

work. Resume to Ryan . 1 yr exp as a Con 

Hou, LHP Software ode een Dy ; Resumes z 
305 Franklin St., Dr sand Oaks, CA 91320- ae eer iar 
Columbus, IN 47201 sina B: specify: jon Glon cover 


Now Let Us Help 
You Get One. 


Engineerir j a) 
Check us out at: 


www.itcareers.com 


or call (800) 762-2977 


One Amge 


IT Education & Training Directory 


Contact the companies listed below 


; Re ' 
a hel ALL fede LLL a To place your ad please call 800-762-2977 


Transcender 

(615) 726-8779 
www.transcender.com 
Award-winning practice exams 
for IT certification 


CBT Nuggets 

(888) 507-6283 & (541) 284-5522 
www.cbtnuggets.com 

Affordable training videos on CD 
MCSE, MCDBA, MCSD, CCNA, 

Citrix, Linux, A+, Net + 


IPexpert, Inc. 

(866) 225-8064 

www.ipexpert.com 

CCIE (R&S, SEC, and C&S), CCSP, 
CCNP, CCNA, IP Telephony 
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job hunting by 


right IT skills 


Find out more 


www.itcareers.com 


IT|careers.com 


Information Technology 
Apply your 
Executive Management Experience 
Sor the Service of our Public Schools! 


SENIOR PROJECT DIRECTOR 


Competitive Salary Based on Experience ($95K+) 


The Senior Project Director for the NJ SMART (Standards 
Measurement and Resource for Teaching) initiative, a 
statewide data warehouse system that provides 
me essential information about educational perfor 
mance, is responsible for coordinating the 
Commissioner of Education’s oversight Task 
Force, directing the statewide deployment with 
600+ school districts, managing contractors 
and overseeing a multi-million dollar planning 
———— process. Successful candidate must be a 
seasoned project manager with large scale deplo 
experience, be a proven leader, highly motivated, self-c 
ed and team-oriented. Requirements: Bachelor's Dec 
(preferably Master's Degree) in information management 
business administration or related field. Fifteen (15) years of 
experience in general project management. Please forward 
resumes by February 27, 2004 


itcareers.com 


For complete job description, please visit 
www.state.nj.us/njded/genfo/vacancy.htm 
Personnel Director 
New Jersey Department of Education 
Reference #: U-04-006-J01 
PO Box 500, Trenton, NJ 08625-0500 
Resumes may be e-mailed to: resume@doe.state.nj.us 


AWE 


can solve the 


labyrinth of 


PROGRAMMER/ANALYST Systems Engineer 
lyze, design, devel T Bach. deg. in C 
nt and maintain Pocket PC related field & 2 y 
wireless and smart phone 4 offered or 2 yrs 
ng object oriented mgmt. All ¢ 
sdology, C++, VC++, Win w/Microsoft NT 
API, EDMS, MFC, XML, OLE Exchange 
Drag/Drop and Map Objects ware, inc 
indows NT/2000/XP, also inc 
2000 Server 
ing s s. Require: B.S. de Server; UNIX S 
gree in Computer Science 
Engineer iscipline 
closely related field with 2 yrs of Solution; Blackb 
Right Fax. Must have at le 


matching the 


exp in the job offered or as a 
Programmer. Extensive travel yr. of exp. managing a 
from planning to implementat 


stage. In lieu Bach. deg 


on assignments to v client 
sites within the U.S. is required 
2 salary offered. Ap- 

y resume to: Vicki Tayl 
Axiom Corp., 3490 Piedmo perform sys 
Rd. Ste 800 , Atlanta, GA 30305 admin. for all 


Attn: Job CV systems utilized w/in TE 


wide, w/a focus 


accept add'l. 5 


comp. sci. field. Work witeam t 


messaging. ( 
Software Analyst to d & software 
develop. analize and execution & capacity p 

of test plans, test cases, test toring, tape backur 


scripts using Silk Test, Silk sizing & client con 


with the right Performer, Mercury Win Runner San acne 


2r, Ration test suite TBS In 
st director on Unix CNN Center 
PI Require Atlanta, GA 3034 
Science: 
Engineering or a closely related 
field with 2 years of progres- 
m i’ sively responsible experience in 
IT position. the Job offered or in the related 
occupation of Programmer 
Analyst. Extensive travel on 
assignments to various client based sc 
sites within the US is required behalf of < 
Competitive Salary offered banking 


Computer - Senior IT Spec 
Pittsburgh, Pennsylvaniz 
various client sites thr 
the US. Architect, instal 
ure, and ir 


Apply by resume to : Ravi enabling clients using 
Kandimalla, President, Everest JavaMail API, XML, XSLT. 
Computers, inc 875 Old EJB Desigr Jevel 
Roswell Lakes Road, Suite E 
400 Roswell GA 30076. Attn portal themes and skin 
Job: RR and train other tearr 
Requires Master's D 


implement portlets 


Verinon Technology Solutions 
Ltd. is looking for Programmer 
Analysts a Bachelor's 


. f progressively 
Must have 2 years experience Grogass 


in any 2 of the following: Java a 
C++, XML, J2EE, EDI, Rational lieu of a Maste' 
Rose, EJB, Siebel, Web two (2) years e 
Servers, Oracle, DB2, Sybase job offered or two (2 
Documentum, Livelink, People- of experience 
Soft, SAP, JD Edwards, SAS occupation of 
Visual Basic, ASP, Business Engineer. $95,000.00 per year. 
Objects and Cognos 40 hours per week 8 


responsible work ex 


Jam 


4:30pm. Send resume to Case 


Should have a Bachelor's #WEB 383335. Site Director 
Degree in Computer Science: 
Related field. Mail Resume to 
Verinon Technology Solutions 
Ltd,200 South Executive Drive 
Suite 101, Brookfield, WI 
53003 


Pittsburgh/ Allegheny Co 
CareerLink, ATTN: CL Prog 
Supervisor, 425 Sixth Avenu 
Suite 2200, Pittsburgh 


15219-1837 


Software 


IT|Careers 


Looking for a career on the cutting edge of technology? This is the 
place. People here love their work because they get to think big and 

dream big. Combine your proven skills with our resources - and really 
take off. Microsoft, Microsoft Business Solutions, and FRx have the 
following opportunities available: 


Redmond, WA 

Software Engineers, Program Managers, Support Engineers, Systems 
Analysts and Consultants, Business and Financial Analysts, Auditors 
and Accountants, Business Development Managers, Directors, Instructional 
Designers, Marketing Managers, Product Designers, Product Managers, 
Network Engineers, Recruiters, Technical Writers and Editors, Technology 
Specialists, Systems Engineers, Usability Engineers, Account Managers 
HR Managers, and Software Localization Engineers 


Irvine, CA 
Business Strategy Analyst 


Mountain View, CA 
Software Engineers, Web Design Engineer, Program Managers, 
Database Administrator, Hardware/Electronic/Design Engineers 


Malvern, PA 
Financial Analyst 


Reno, NV 
Contract Management Revenue Analyst 


Salt Lake City, UT 
Software Design Engineers, Software Animator 


Irving/Las Colinas, TX 

Support Engineers, Support Professionals, Developer Support Engineers, 
Solution Integration Engineers, Escalation Engineers, Application 
Development Consultant, Technical Leads, Partner Technical Leads 
Consultants, Business Analysts. 


Dallas, TX (Ensemble Studios) 
Artists/Animators 


Houston, TX 
Business Productivity Advisor (Services Executive) 


San Francisco, CA 
Technical Account Manager 


Santa Monica, CA 
Computer Systems Analyst (Consultant) and Software Engineer (Systems 


Denver, CO 
Software Engineers - FRx Software 


Southfield, MI 
Managing Consultant 


Charlotte, NC 
Group Manager, Support Engineers, Software Engineers 


Fargo, ND 
Software Engineers - MBSC 


Findlay, OH 
Software Engineer - MBSC 


Ft. Lauderdale, FL 
Operations Analyst (Site Engineer), Product Manager (Segment 


Marketing Manager), MBS Service Practice Manager, Financial Service 
Manager, HR Manager 


All positions offer competitive salary and excellent benefits, including 
bonuses, stock grants and/or stock options. 40 hours per week, flex time. 
E-mail your resume in text format to: http://www.microsoft.com/careers 
(indicate Job Code A411 in the subject header), or mail your resume to 
Microsoft Corporation, Attn: A41, One Microsoft Way, Redmond, WA 
98052. No phone cails please. We are an equal opportunity employer 
and support workforce diversity. Visit our Web site for more details 


Micresoftt 
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Technology Management 


Kilmer Rd, Edison 


SOFTWARE ENGINEER to de- 
sign, develop and test various 
modules of embedded software 
and perform Configuration Man: 
agement for the mobile commu- 
nication industry using Clear- 
case, ClearQuest, Java and 
C/C++ under Windows NT and 
UNIX operating systems; Auto- 
mate Processes and Builds 
using Shell and PERL scripts. 
Prepare Configuration Manage: 
ment plans for new projects 
Participate in Change Contro! 
Boards; Mentor and train junior 
Staff members in Clearcase and 
ClearQuest Administration. Re- 
quire: B.S. degree in Computer 
Science, an Engineering disci- 
pline, or a closely related field 
with three years of experience in 
the job offer Competitive 
salary offered. Send resume to 
Nancy A 
President, Human Resources 
Panasonic Mobile Communica 
tions Development Corporation 
Northbrook Pkwy. 

30024. Attention 


Geraghty Vice 


Job SH 


SOFTWARE ENGINEER to 
design, develop, test, imple- 
ment and maintain application 
software using Informix 4GL 
ISQL, Forms/Reports, Stored 
Procedures, Orac PL/SQL 
Shell Script, Awk, Cold Fusion 
Java, JavaScript, Crystal Re- 
ports, Visio, Erwin, HTML 
DHTML and MS Office Tools 
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operating systems. Require 
M.S. degree in Computer Sci- 
ence/Engineering, or a closely 
related field with 2 yrs of exp in 
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grammer/Analyst. Extensive 
travel on assignments to vari- 
ous client sites within the U.S 
is required. Competitive salary 
offered. Send resume 
Sundeep Chaudhr 
Solutions, In 

Way, Suite 203, Decatur, GA 
30033; Attn: Job PT. 


Senior Consultant. Lead team to 
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unanticipated locations through- 
out US. By 
t Employment 


send resume 
Security 
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Looking for 
a new career? 
The new 
itcareers.com 
and 
CareersJournal.com 
combined 
jobs database 
can help you find 
one, 


Check us out at: 


www. itcareers.com 


or call (800) 762-2977 


TLaKeelacreremeeyen 


The World Of 
Work Is Changing 
very Week. 


LUCKILY, WE ARE Too! 
itcareers.com 1s now 


powered by 
CareerJournal.com! 


Search for jobs and post 
your resume here on 
www.itcareers.com 


or call:(800 
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INTERNET ARCHITECTURE BOARD 30 

INTERTAPE POLYMER GROUP INC. 35 

INTERVOICE INC 37 

INTUIT INC 4 

ISOGON CORP. 35.36 

J.C. PENNEY CO. 1 

J.D. EDWARDS & CO. 8 

J.P. MORGAN CHASE & CO 

JOE LIEBERMAN FOR 

PRESIDENT INC. 

JOHNS HOPKINS UNIVERSITY 

KAZAA COM 

KINETICODE INC. 

LASZLO SYSTEMS INC 

LIBERTARIAN PARTY 

LYDIAN TRUST CO. 





METRO GROUP 


1 


MFS INVESTMENT MANAGEMENT 5 
MICROSOFT CORP... 4,8,11,18,19,28,32,34 


MIDWEST BANC HOLDINGS 
MONSANTO CO. 

NATIONAL PUBLIC RADIO 
NAUTICUS NETWORKS INC. 
NEOIT.COM INC. 
NETSCALER INC 

NETWORK ASSOCIATES INC. 
NORTEL NETWORKS LTD. 
NOVELL INC. 

OFFICE DEPOT INC 


INC 42 


OKLAHOMA HEART HOSPITAL 


OMNITRUST SECURITY 
SYSTEMS INC 

ONYX ACCEPTANCE CORP. 
OPEN SOURCE 
DEVELOPMENT LABS 
OPSWARE INC. 

ORACLE APPLICATIONS 
USERS GROUP 
ORACLE CORP. 
ORBITZ INC 
OVERTURE SERVICES INC. 
PACIFICORP. 

PALMONE INC. 


1.48. 


St 
11,18,34,38,51 


PALO ALTO RESEARCH CENTER INC... . 31 


PARAMETRIC TECHNOLOGY 
PAYPAL INC 
PEOPLESOFT INC. 


CORP. " 
8.19 
6.11,14,51 


PETCO ANIMAL SUPPLIES INC. 1 


PING INC. 

PLASTIC LOGIC LTD. 

PROBIX INC. 

PROGRESSIVE STRATEGIES 
RED HAT INC. 

REDMONK LLC 

ROYAL BANK OF CANADA 


n 

av 

8 

INC. 14 
1.14,28,34,52 
n 

38 





SAVVIS COMMUNICATIONS CORP. 4 
SCANSOFT INC 

SEARS, ROEBUCK AND CO. 
SEGWAY LLC 

SEVENSPACE INC 

SIEBEL SYSTEMS INC 

SIX APART LTD. 

SOAR TECHNOLOGY INC. 
SOCIALTEXT INC 

SOCIETY FOR INFORMATION 
MANAGEMENT 40 
SONG NETWORKS HOLDING AB 12 
SOURCEFORGE.NET 18 
SPRINT CORP. 4 
STRATEGIC RESEARCH 

INSTITUTE LP 

STRATUS TECHNOLOGIES 
INTERNATIONAL 16 
SUN MICROSYSTEMS INC. 8,14,30,38 
SUSE LINUX AG 1,34 
SYGATE TECHNOLOGIES INC 

SYMANTEC CORP. 

TARGET CORP. 

TECHDIRT INC 

TELEX COMMUNICATIONS INC 

TESCO PLC 

THE ASSOCIATED PRESS. 

THE BOEING CO. 

THE BURLINGTON NORTHERN 

AND SANTA FE RAILWAY CO. 

THE CENTURY FOUNDATION 

THE GILLETTE CO. 

THE L.D. KICHLER CO. 

THE NEIMAN MARCUS GROUP INC. 

THE ORGANIZATION FOR THE RIGHTS: 
OF AMERICAN WORKERS INC. 1 
THE SCO GROUP INC. 114,52 
THE VANGUARD GROUP INC. 35 
THE WALT DISNEY CO. 68 


23.24 





TRACTION SOFTWARE INC. 
TREND MICRO INC 

TWI INTERACTIVE INC. 

U.S. ARMY 

U.S. DEPARTMENT OF DEFENSE 
U.S. SECURITIES AND 
EXCHANGE COMMISSION. 
UNITED PARCEL SERVICE INC. 
UNIVERSITY OF CALIFORNIA, 
BERKELEY 

UNIVERSITY OF IOWA 
UNIVERSITY OF MICHIGAN 
UPSHOT CORP. 

VA SOFTWARE INC. 
VANQUISH INC 

VERITAS SOFTWARE CORP. 
VMWARE INC. 

VOTER SOLUTIONS INC. 
WAL-MART STORES INC. 
WAVEXPRESS INC 

WEBEX COMMUNICATIONS INC. 
WEBMD CORP. 

YAHOO INC. 

ZELOS GROUP INC. 

ZONE LABS INC 
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Continued from page 1 


Retail RFID 


demonstrated far less knowl- 
edge about how the technolo- 
gy works. But as the new year 
begins, the executives are ex- 
pressing great interest now 
that Wal-Mart Stores Inc. has 
directed its top 100 suppliers 
to put RFID tags on pallets 
and cases they ship to the re- 
tailer’s three Texas distribu- 
tion centers by next January. 

“I’m sure Wal-Mart will 
help the industry by basically 
driving the requirement and 
driving the price points to 
make it more affordable,” said 
Alan Lacy, CEO of Sears, Roe- 
buck and Co. He said Sears 
will adopt RFID “as it makes 
economic sense,” since it ex- 
pects to see benefits in the 
areas of inventory tracking 
and theft protection. 


Creating Momentum 
“For every new technology, 
there tends to be somebody 
who creates the momentum, 
whether it be bar codes or 
EDI,” said Phillip Maxwell, 
CIO at The Neiman Marcus 
Group Inc. in Dallas. “I think 
that’s what happened here.” 

Maxwell said the high value 
and uniqueness of his compa- 
ny’s products will make them 
good candidates for RFID tags. 
But he expects it to be at least 
three years before Neiman 
Marcus uses RFID, because 
the company will require 
item-level tags. The first phase 
of RFID will be at the pallet 
and case levels, he said. 

But several retailers said 
they’re anxious to get to item- 
level tagging. Brian Devine, 
CEO of Petco Animal Supplies 
Inc. in San Diego, said he can 
envision the day when a cus- 
tomer will be able to simply 
push a shopping cart through 
an RFID-enabled arch and 
swipe a credit card to pay for 
his purchases, with no individ- 
ual scanning necessary. He 
said another arch could disen- 


| 


gage the tags for privacy-con- 
scious customers. 

But while Devine can fore- | 
see pallet-level tagging within | 
the next three years, he ex- 
pects that it will take much 
longer for item-level tagging 
because of the costs, not only 
of the tags but also of the in- 
frastructure that goes with it. 

Some retail analysts predict- 
ed that it could take more than 
a decade for item-level tagging 
to gain wide usage among 
mass retailers. Christine Over- 
by, an analyst at Forrester Re- 
search Inc. in Cambridge, 
Mass., estimated that it will 
take five to seven years for the 
rollout of RFID in the supply 
chain and two decades for 
item-level tagging on the con- 
sumer end because of privacy 
implications and “sheer costs.” 

Early adopters are also cau- 
tious in their predictions for 
item-level tagging. Wal-Mart 
isn’t even doing it yet. Metro 
Group, a German retailer, is 
piloting item-level tagging, but 
CEO Hans-Joachim Koérber 
said it will take 10 to 15 years 
to gain universal acceptance 
(QuickLink 44114]. 

Colin Cobain, IT director at 
U.K.-based retailer Tesco PLC, 
said his company’s pilot with 
Gillette razor blades showed 
that the technology works, but 
the cost of the tags and read- 
ers was too high to bring a re- 
turn. Tesco is currently nego- 
tiating with its reader and ap- 
plication provider to finalize a 
business case for tagging 
DVDs, but Cobain is cautious. 


Happy to Wait 

“I don’t want to be the guy 
who’s actually going first and 
making it a real cheap case to 
anybody who follows,” he said. | 

That attitude is shared by 
many other retailers, which | 
are happy to benefit from the 
lessons learned by early 
adopters such as Wal-Mart. 

“I don’t ever want to be a 
leader on things like that be- 
cause there’s no advantage — 
but you can be a quick copier,” 
said Allen Questrom, CEO of 


J.C. Penney Co. in Plano, 
Texas. “Why pay a lot of mon- 
ey when things are going to 
change, and you've got to be 
able to adapt to the changes?” 

Questrom said he was the 
“last person” to move to Inter- 
net-based retailing because he 
couldn’t figure out how to 
make money on it. He said his 
site now makes money. 

Bruce Nelson, CEO of Of- 
fice Depot Inc. in Delray 
Beach, Fla., predicted that 
adoption will vary by industry, 
and he’s content to “wait and 
see how it unfolds.” Nelson 
said he has business, IT and 


COMPUTERWORLD January 26,2004 J 


logistics staffers studying 
RFID, and he expects that the 
company will try it within two 
to five years because of the 
“enormous potential payoff.” 

But Nelson has concerns. 
He cited the risk of adopting 
technology that has yet to be 
standardized as well as the ex- 
pense of the tags, readers and 
systems integration. He added 
that it won’t make economic 
sense to tag small-ticket items 
like pencils, for instance, and 
he fears that if some products 
carry tags and others don’t, his 
company could need two sys- 
tems to handle the data. 


Last year, the cost of the 
RFID tags — which currently 
ranges from about 25 to 50 
cents each — appeared to be 
the major concern among re- 
tailers and suppliers. Now 
their concerns have become 
broader. 

Sears CIO Gary Kelly said 
the cost of the readers and 
middleware that will be need- 
ed to take full advantage of 
RFID, not merely the cost of 
the tags, is driving the eco- 
nomics. “You really have to 
have pervasive read capability 
wherever you apply this,” he 


said. @ 44258 


Oracle to Add RFID 
Support to Its Apps 


Will also announce new pricing, 


outsourcing options at AppsWorld 


BY MARC L. SONGINI 
l ITS ANNUAL con- 
ference for users of 
its business applica- 
tions this week, Ora- 

cle Corp. will unveil new soft- 

ware pricing and outsourcing 
options as well as plans to em- 
bed radio frequency identifi- 
cation (RFID) technology in 
its products. 

Oracle said in a written 
statement that it plans to dis- 
cuss its RFID strategy at the 
AppsWorld event, which is 
due to begin tomorrow in San 
Diego. The company also will 
make other announcements 
related to its E-Business Suite 
lli line of applications, but it 
declined to provide any de- 
tails. Nor would it say when 
the RFID technology is sched- 
uled to become available as 
part of Ili. 

Oracle would be the second 
major applications vendor to 
embrace RFID this month. 


| Two weeks ago, ERP market 


leader SAP AG said it had 
bundled RFID data manage- 


ment capabilities into some of 
its applications, including its 
SAP Event Management sup- 
ply chain module [QuickLink 
44133]. 

The RFID enhancements 
being promised by Oracle are 
of interest to Gary Concan- 
non, manager of the business 
technologies department at 
Sandia National Laboratories 
in Albuquerque and a member 
of the board of directors at the 
independent Oracle Applica- 
tions Users Group. 


Tracking Lab Equipment 
Sandia runs Version 11.5.8 of 
Oracle’s financial, manufac- 
turing and procurement appli- 
cations. Concannon said he 
wants to use integrated RFID 
technology to track the bil- 
lions of dollars’ worth of test- 
ing equipment installed in the 
lab via a wireless network. 
He’s also interested in learn- 
ing more about Oracle’s busi- 
ness intelligence tools at 
Apps World, as well as the pos- 
sibility of using its software 


portal as a window for all end 
users to access the lli suite 

Joshua Greenbaum, an ana- 
lyst at Enterprise Applications 
Consulting in Daly City, Calif., 
said SAP, Oracle and other 
ERP vendors accelerated their 
push to support RFID after 
Wal-Mart Stores Inc. mandat- 
ed last June that its top 100 
suppliers adopt the technolo- 
gy in their supply chain opera- 
tions by January 2005 [Quick- 
Link 39181]. 

Despite the planned RFID 
announcement and the other 
new developments, Oracle’s 
focus at AppsWorld will likely 
be on more routine issues, 
such as upgrade cycles, rather 
than major technology roll- 
outs, Greenbaum said 

He added that Oracle needs 
to do more marketing of its 
applications, as opposed to its 
database and infrastructure 
software business. The com- 
pany has also been focusing 
too much attention and energy 
on its hostile bid to buy rival 
PeopleSoft Inc. and not 
enough on developing its own 
internal strengths and struc- 
ture, according to Greenbaum. 


@ 44240 
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Weirder & Weirder 


OU PROBABLY THOUGHT things couldn’t get any 
weirder with The SCO Group and Linux, didn’t you? Of 
course they could. Last week, the company that claims 
all Linux users owe it royalties sued Novell for “slander 
of title.” Now that’s weird. Impressive, certainly — 
“slander” gives it a sort of Hollywood-starlet-vs.-supermarket- 
tabloid sexiness. But chances are, unless you’re a lawyer, you don’t 
have the slightest idea what it means. 
Now, why would SCO want to confuse you that way? 


Here’s the background: Last summer, SCO 
claimed that it owns all the copyrights associat- 
ed with Unix and that Novell sold it those 
rights in a 1995 contract. That’s important to 
SCO’s legal claims, because SCO needs to own 
the Unix copyrights in order to sue Linux users 
for infringing them. No Unix copyrights, no 
Linux copyright-infringement suits. 

But Novell said SCO was wrong — first pri- 
vately in letters to SCO, and later publicly. Nov- 
ell said that it didn’t sign away its Unix copy- 
rights in that 1995 contract and that it still owns 
all the copyrights to Unix. 

Sounds like a contract dispute, right? SCO 
claims the 1995 contract says one thing; Novell 
claims it says something different. 

But instead of filing a contract lawsuit, SCO 
has sued Novell for “slander of title.” 

What is that? Slander of title is usually 
invoked when someone owns real estate and 
someone else questions that ownership, making 
it difficult or impossible for the owner to sell 
the property. 

Applying that idea to Unix copyrights, SCO 
says Novell has publicly claimed that SCO 
doesn’t own those copyrights — thus discour- 
aging Linux users from paying royalties to SCO. 

Yes, that’s a weird way to approach 
what’s really a contract dispute over 
software copyrights. And that’s 
telling, because there’s only one rea- 
son why lawyers choose an oddball 
way of pursuing a suit. They do that 
when it looks like the straightfor- 
ward approach won't work. 

Judges like straightforward ap- 
proaches. Juries do, too. And it’s a 
judge and jury that will eventually 
have to decide what that 1995 con- 
tract said and who should own the 
Unix copyrights. 

If SCO’s lawyers could make a 
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good case with a contract lawsuit, they would. 
Apparently, they can’t. 

It turns out that SCO’s lawyers aren't likely to 
have much luck with a slander-of-title suit 
either. It won't pry loose the Unix copyrights 
from Novell, since that’s a contract issue that’s 
not affected by any of Novell’s public state- 
ments. And a slander-of-title lawsuit is likely to 
be tossed out by a judge, whose first question 
will be, “Why didn’t you file a contract suit?” 

Ah, but until then, it sounds impressive, 
doesn’t it? Almost as impressive as SCO’s re- 
cent claim that open-source software is uncon- 
stitutional, or as the letter SCO sent to mem- 
bers of Congress insisting that Linux is a threat 
to the U.S. economy and national security. It 
may all be meaningless, but it looks pretty good 
in press releases and news stories. 

So why would SCO want to be sowing all that 
weirdness and confusion? 

Could it be for the same reason that SCO has 
had such trouble coming up with convincing 
examples of copyright infringement? And credi- 
ble evidence of IBM contract violations? And a 
viable defense against the lawsuit Red Hat filed 
against SCO last August? 

After all the success SCO’s management has 
had using legal threats to pump up 
the stock price from less than $1 
per share to more than $20 late last 
year, could it be that SCO’s execu- 
tives — or at least its lawyers — 
figured out months ago that SCO 
hasn’t got a case against Linux? 

Could it be that they keep piling 
on the lawsuits and the rhetoric for 
fear that if they stop now, SCO’s 
stock price will collapse and they'll 
be buried by shareholder lawsuits 
and an SEC investigation? 

Naaah — that would just be too 
weird. @ 44217 
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Seemed Like a Good Idea. . . 


This executive's laptop always fails during takeoff on 
the company’s private jet. After the laptop checks out 
OK on the ground, IT pilot fish gets a directive: Ride up 
and down in the plane as many times as necessary to 
troubleshoot it. “After several takeoffs and landings, it 
was determined that the laptop had a loose wire that 
moved with the force of takeoff,” sighs fish. “It cost 
more tor testing than a new laptop would have cost.” 


Nice Try 
Company policy 
allows only IT 
people to move 
PCs. So this sup- 


when he eyeballs the 
reason for one remote 


user’s network problems 


~ the cable is being 
crushed by a cubicle 
wall. “We moved the PC 


lifted the wall and threw 


then reconnected it,” 
user explains. Fish: Why 


didn’t you call me to do it : 
for you? User: “We didn’t i 
want you to have to make : 
: really uses it.” 


the trip out here.” 


Brilliant Idea 

IT pilot fish is watching 
the shop during a big 
company celebration, 
when at 11 p.m. a call 
comes in: The server 


won't respond. Fish 


heads to the server room : 
was about 110 degrees in : 
: reports, “so | told her I'd 
: be home by midafter- 

; noon, as soon as | 

? wrapped up the last of 

: my turnover duties.” The 
i “Her mother suggested | 
; get my butt home right 

: then, or she would be 

| coming to get me,” says 
: fish. “I considered my 

: told my boss so - over 

: my shoulder, as | bolted 


to check it out. “And it 


there,” fish says. Seems 
the celebration’s finale 
included fireworks 
launched from the roof. 
“Engineering decided 
that the air conditioning 
would suck the smoke 


This CiO buys an elec- 
tronic whiteboard for his 


office. When he leaves 


HARK 
TANK». 


port pilot fish is irritated: 


i er what the problem is. 
to the other side and then : 


“The power supply 


: seems to have been lost 


during the move,” man- 


: ager says. “I'm pretty 
: sure it will work if we 


find the power supply. 
We just haven't made it 
a priority, since no one 


: Change of Plan 

: pilot fish will turn over 
: his projects, with updat- 
: ed notes, and take a 

: month's vacation. The 


call, 11 a.m.: “Her con- 


10 minutes apart,” fish 


for the door.” 


FEED THE SHARK! Send your true tales of IT life to 
sharky@computerworld.com. 


You snag a snazzy 


Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 


computerworld.com/sharky. 
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Server blades engineered to work 
across complex computing environments. 


HP ProLiant server blades, powered by Intel Xeon processors, are designed to support a variety of robust enterprise solutions, 
including SANs. It is not difficult to appreciate the architectural excellence of the new HP ProLiant BL40p and BL20p G2 server blades. They're the most powerfu 
industry-standard blades for business today. In addition to meeting your company’s expanding needs for server capacity, they're designed with SA 

sophisticated storage environments—easily, reliably and affordably. Combined with HP ProLiant Essentials software, they can dramatically re 


maximize productivity. Which means, of course, your business saves money. Demand more from your IT systems. Integrate HP ProLiant server blades 


And carry your business to a stronger, more cost-effective place 


Complements ProLiant 


server blades 
& 
y 
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HP PROLIANT BL20P G2 HP MODULAR SMART 
ARRAY 1000 





HP’s virtualization solutions simplify storage management while making the most of the storage you already have. 
Your data storage needs keep expanding. Your budget keeps shrinking. HP’s EVA3000 and EVA5000 virtual arrays can solve both problems. They let you 
pool your storage, so it can be instantly assigned wherever, whenever and in whatever amount it's needed. Efficiency doesn’t come at the expense of complexity 
either, thanks to an intuitive Web interface. And HP is the only company that offers host, network and array-based virtualization solutions. Lower costs. 


Higher utilization of your assets. It’s a virtual no-brainer 


HP StorageWorks EVA5000 


Modular virtual RAID storage for effective 
SAN data administration at minimal costs 
utomated array management removes 

boundaries of traditional storage 
Outstanding self-tuning performance with 
scalable capacity on demand 

Highly available platform offering stability 
and proactive services 


Demand more efficiency. Download ZDNet's white paper “Doing More with Less with HP StorageWorks EVA5000 or 
HP StorageWorks EVA3000” at www.hp.com/go/storage?2 or dial 1-800-282-6672, option 5 and mention code AK WA. 








